xk33 Privacy Policy

1. Who We Are

This Privacy Policy is issued by xk33 ("xk33", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://xk33.io. xk33 is the data controller responsible for the personal information collected from users ("Player", "you", "your") who register for and use the Service.

This Privacy Policy applies to all personal data collected through the xk33 website, mobile-optimised site, and any related communications channels including email correspondence and support interactions. By registering an account and using the xk33 platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

xk33 collects personal data through several channels — directly from you when you register or interact with the platform, automatically as you use the Service, and occasionally from third-party verification partners. The categories of data we collect are set out below.

2.1 Registration and Account Data

When you create an xk33 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Mobile phone number
• Email address
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and retain copies of:

• National Identity Card (NID) or passport
• Proof of address documents (utility bills, bank statements)
• Payment method screenshots or statements to confirm ownership
• Selfie or photographic identity confirmation where required

2.3 Financial Transaction Data

When you deposit or withdraw funds, we collect and retain records of:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction amounts in BDT (Bangladeshi Taka)
• Transaction timestamps and reference numbers
• Account balance history relevant to fraud prevention

2.4 Betting and Gaming Activity Data

We record all betting and gaming activity associated with your xk33 account, including sports bets placed, casino game sessions, wager amounts, outcomes, and bonus usage. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical and Usage Data

When you access the xk33 platform, our servers automatically collect certain technical information:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features used, and session duration
• Referral source and navigation path through the site

Data Category	Collection Method	Primary Purpose
Registration & Account Data	Provided by player at sign-up	Account creation and identity verification
KYC Documents	Uploaded by player on request	Age and identity verification, fraud prevention
Financial Transaction Data	Generated during deposits/withdrawals	Payment processing, anti-money laundering compliance
Betting & Gaming Activity	Automatically recorded during platform use	Account management, dispute resolution, responsible gaming
Technical & Usage Data	Automatically collected via server logs	Platform security, performance optimisation, fraud detection
Communications Data	Provided by player via support channels	Customer support and complaint handling

3. How We Use Your Personal Data

xk33 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your xk33 player account, including processing login requests and account settings changes.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment providers, and to maintain accurate transaction records.
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity as required by our KYC procedures.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats to the platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour and to apply responsible gaming tools such as deposit limits and self-exclusion where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate with you about your account.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the xk33 platform experience for all players.
• Legal Compliance: To fulfil our obligations under applicable laws and regulations, including responding to lawful requests from authorities.
• Marketing Communications: To send you promotional offers and updates about xk33 products and services, where you have consented to receive such communications. You may withdraw this consent at any time.

4. Legal Basis for Processing

xk33 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., operating your player account, processing bets, and handling financial transactions.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where our interests do not override your rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. You may withdraw consent at any time by contacting [email protected].

5. Sharing Your Personal Data

xk33 does not sell or rent your personal data to any third party. We may share your data with trusted partners and service providers under strict confidentiality obligations, and only to the extent necessary for the purposes described in this policy. Categories of recipients include:

5.1 Payment Processors

We share transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card network operators solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the data they process on their platforms.

5.2 Identity Verification Partners

Where necessary, we share identity documents with third-party KYC verification service providers to confirm player identities and ages. These partners are bound by data processing agreements and may not use your data for any other purpose.

5.3 Game Content Providers

When you play games hosted by third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, or Ezugi, limited technical data (such as player session tokens) is shared with those providers to enable gameplay. These providers do not receive your full personal profile.

5.4 Legal and Regulatory Authorities

xk33 may disclose personal data to law enforcement agencies, regulators, or other public authorities where required to do so by law, court order, or in connection with the prevention or investigation of criminal activity including fraud and money laundering.

6. Cookies and Tracking Technologies

xk33 uses cookies and similar tracking technologies on the platform to ensure proper functionality, remember your session preferences, and analyse how the site is used. The types of cookies used include:

• Essential Cookies: Required for the platform to function correctly — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the Service.
• Functional Cookies: Used to remember your preferences such as language settings and display options between sessions.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the xk33 platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Fraud Prevention Cookies: Used to detect unusual or suspicious behaviour patterns on accounts, contributing to overall platform security.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies may prevent you from logging into or using certain features of the xk33 platform.

7. Data Retention

xk33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The general retention periods applied are as follows:

• Active account data: Retained for the lifetime of your xk33 account and for a period of up to five years following account closure.
• Financial transaction records: Retained for a minimum of five years following the date of each transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for the duration of your account and for up to five years after account closure.
• Support correspondence: Retained for up to three years from the date of the last interaction.
• Technical and usage logs: Retained for up to twelve months in anonymised or aggregated form.

When data is no longer required and the applicable retention period has expired, it is securely deleted or irreversibly anonymised.

8. Your Data Rights

As a player on the xk33 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of Access: You may request a copy of the personal data xk33 holds about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted. Note that this right is subject to legal retention obligations — we cannot delete transaction records that we are legally required to keep.
• Right to Restrict Processing: You may request that we limit the way in which we process your data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: You may request a copy of the data you provided to xk33 in a structured, machine-readable format.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. Upon receiving such a request, xk33 will cease marketing communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9. Data Security

xk33 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, loss, or misuse. These measures include:

• SSL/TLS encryption across all data transmissions between your device and the xk33 platform.
• Secure, hashed storage of account passwords — xk33 staff cannot view your password in plain text.
• Access controls that limit internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities.
• Incident response procedures to address and notify players of any data breach that affects their personal information, in accordance with applicable notification requirements.

While xk33 applies strong security controls, no online platform can guarantee absolute security against all threats. You are also responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your account, please contact [email protected] immediately.

10. Children's Privacy

The xk33 platform is strictly for adults aged 21 years and above. xk33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has created an account or submitted personal data, that account will be immediately suspended, all data will be deleted, and any associated funds will be returned subject to verification.

Parents and guardians are encouraged to use parental control and content-filtering software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on xk33, please contact [email protected] immediately.

11. International Data Transfers

xk33 primarily stores and processes player data within secure data centre facilities. In certain circumstances, data may be transferred to or accessed by service providers operating in other countries — for example, third-party game providers or KYC verification partners based outside Bangladesh. Where such transfers occur, xk33 ensures that appropriate safeguards are in place, including contractual data protection clauses, to maintain the same standard of protection that applies to data held within the platform.

By using the xk33 Service, you acknowledge that your personal data may be transferred in this manner and that xk33 takes reasonable steps to ensure it remains protected throughout any such transfer.

12. Third-Party Links

The xk33 platform may contain references to third-party game providers, payment services, and other external platforms. xk33 is not responsible for the privacy practices of these third parties. Once you navigate away from the xk33 platform to a third-party site or application, this Privacy Policy no longer applies. We encourage you to read the privacy policies of any third-party services you interact with.

13. Updates to This Privacy Policy

xk33 reserves the right to update or revise this Privacy Policy at any time. When changes are made, we will update the "Last Updated" date at the top of this document. For material changes — those that significantly affect how your data is used or your rights in relation to it — xk33 will notify registered players by email or through an in-platform notification prior to the changes taking effect.

Your continued use of the xk33 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xk33 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

xk33 aims to respond to all privacy-related enquiries within 48 hours. For formal data rights requests, responses will be provided within 30 days as described in Section 8 above. Please use your registered email address when contacting support so that your request can be matched to your account efficiently.