Privacy Policy — Your Data, Protected by kilovip

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal information of kilovip users is the kilovip platform operator ("kilovip", "we", "us", "our"). kilovip operates the website at kilovip.org and all associated services accessible through that domain.

By registering a kilovip account or otherwise using kilovip's services, you ("the Player", "User", "you") acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy applies to all personal data collected from players based in Bangladesh and from any other user who accesses kilovip's platform, regardless of location. It applies to data collected through the kilovip website, mobile browser interface, and any associated customer communications channels (email, live chat, support tickets).

2. Information We Collect

kilovip collects personal data through several channels: information you provide directly during registration and account management, information generated automatically through your use of the platform, and information received from third-party verification and payment services.

Information You Provide Directly

Information Collected Automatically

3. Why We Process Your Data

kilovip processes your personal data only for specific, legitimate purposes. We do not process data for any purpose beyond what is described in this Privacy Policy without first obtaining your explicit consent. The table below summarises our processing activities and their legal basis.

4. Data Sharing & Third Parties

kilovip does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Service Providers

To process deposits and withdrawals, kilovip must share relevant financial and identity data with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. Each of these providers operates under its own privacy and data security policies. kilovip shares only the data strictly required to complete or verify a specific transaction.

Identity Verification Services

To comply with age verification and know-your-customer (KYC) obligations, kilovip may share identity document data with third-party verification service providers. These providers process identity data solely for the purpose of confirming that you meet kilovip's eligibility requirements and are contracted to handle this data under strict confidentiality terms.

Game Software Providers

kilovip's casino games are powered by third-party software studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. These providers receive anonymised session and gameplay data necessary to operate the games. They do not receive your full personal identity or financial details unless specifically required for a live casino table session under their own compliance framework.

Legal and Regulatory Disclosure

kilovip may disclose personal data to relevant authorities in Bangladesh or other applicable jurisdictions where required to do so by law, court order, or binding regulatory direction. Such disclosures are made in good faith and with appropriate care to limit the scope of information shared to what is strictly mandated.

Business Transfers

In the event that kilovip undergoes a business restructuring, merger, or acquisition, player data may form part of the transferred assets. In such circumstances, kilovip will notify affected players via their registered email address before their data is transferred to or becomes subject to a different privacy policy, and will provide reasonable opportunity to request account closure and data deletion prior to any transfer.

5. Cookies & Tracking Technologies

kilovip uses cookies and similar browser-based technologies to operate the platform, maintain your login session, remember your preferences, detect fraudulent activity, and gather anonymised analytics data. The following categories of cookies are used on kilovip.org:

Essential Cookies

These cookies are strictly necessary for the kilovip platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking platform functionality. No personal information is stored in essential cookies beyond what is required to maintain a secure, authenticated session.

Preference Cookies

Preference cookies remember your platform settings between visits — for example, your chosen language, notification preferences, and responsible gaming limit configurations. These cookies improve your experience but are not essential to platform operation. They expire after 90 days of inactivity.

Analytics Cookies

kilovip uses anonymised, first-party analytics to understand how players navigate the platform, which game categories are most visited, and where technical issues occur. This data is aggregated and contains no personally identifiable information. kilovip does not use Google Analytics or any third-party analytics service that shares data with advertising networks.

Fraud Prevention Cookies

These cookies help kilovip detect unusual account behaviour, suspicious login patterns, and potential duplicate account creation. They are part of kilovip's broader platform security infrastructure and are classified as essential for the security and integrity of the platform.

6. Data Retention Periods

kilovip retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below sets out our standard retention periods by data category.

After the applicable retention period expires, kilovip will securely delete or irreversibly anonymise your personal data. Anonymised data (from which it is no longer possible to identify you as an individual) may be retained indefinitely for aggregate statistical analysis.

7. How We Secure Your Data

kilovip implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data from unauthorised access, loss, destruction, or alteration:

• Encryption in transit: All data transmitted between your device and kilovip's servers is protected by 256-bit TLS/SSL encryption. kilovip enforces HTTPS across all pages and API endpoints — unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Sensitive data fields — including identity document data, financial account references, and hashed passwords — are encrypted at rest using AES-256 encryption within kilovip's database layer.
• Password hashing: kilovip never stores your account password in plain text. Passwords are hashed using a strong, salted hashing algorithm before being stored. kilovip staff cannot read or retrieve your password.
• OTP authentication: Sensitive account actions — including password resets, withdrawal requests above defined thresholds, and account detail changes — require one-time password (OTP) verification via your registered mobile number.
• Access controls: Access to player personal data within kilovip's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and regularly audited.
• Intrusion detection: kilovip operates automated intrusion detection and anomaly monitoring systems that flag unusual activity patterns for immediate security review.
• Data breach response: In the event of a confirmed personal data breach, kilovip will notify affected players via their registered contact method within a reasonable timeframe and will take all necessary remedial steps to contain the breach and minimise harm.

8. Your Rights Over Your Data

As a kilovip player, you have the following rights with respect to your personal data. To exercise any of these rights, contact kilovip's privacy team at [email protected] from your registered email address. kilovip will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data kilovip holds about you. We will provide this in a commonly used, machine-readable format where technically feasible.
• Right to rectification: If any personal data kilovip holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic data fields (such as contact details) can be updated directly in your account settings without needing to contact support.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer required for the purpose for which it was collected, or where you withdraw consent. Note that kilovip may be required to retain certain data by law (e.g., financial transaction records) even after an erasure request.
• Right to restriction: You may request that kilovip restricts processing of your personal data in specific circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing and a determination is pending.
• Right to data portability: Where kilovip processes your data on the basis of your consent or for the performance of a contract, you have the right to receive your data in a structured, commonly used format for transfer to another service.
• Right to withdraw consent: Where kilovip processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to kilovip processing your personal data where that processing is based on legitimate interest, including profiling. kilovip will cease the relevant processing unless compelling legitimate grounds exist that override your interests.

kilovip will not charge a fee for exercising any of the above rights in ordinary circumstances. If a request is manifestly unfounded, repetitive, or excessive, kilovip reserves the right to charge a reasonable administrative fee or decline to respond, and will inform you of the reason in writing.

9. Children's Privacy

kilovip is strictly an adult platform. We do not knowingly collect, store, or process personal data from any individual under the age of 18. Our registration process includes mandatory age declaration and is subject to identity verification procedures specifically designed to prevent underage access.

If kilovip becomes aware that personal data has been collected from a person under 18 without verified parental consent, we will take immediate steps to delete that data and close the associated account. Any deposits made to an underage account will be returned to the originating payment method, and any winnings generated during the period of underage use will be forfeited.

If you are a parent or guardian and believe your child has registered a kilovip account or accessed kilovip's real-money services using your devices or payment methods, please contact us immediately at [email protected]. We take underage gambling concerns extremely seriously and will prioritise your report.

10. Updates to This Policy

kilovip may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or business operations. When we make material changes — those that significantly affect your rights or the way we process your personal data — we will notify you via your registered email address or through a prominent notice on the kilovip platform, no less than 14 days before the change takes effect.

Non-material changes (such as corrections of typographical errors, clarifications of existing statements, or updates to contact details) may take effect immediately upon publication. The effective date shown at the top of this document will be updated each time the policy is revised.

Your continued use of kilovip following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with a material change and do not wish to continue using kilovip under the revised policy, you may request account closure and data erasure at any time by contacting [email protected].

All previous versions of kilovip's Privacy Policy are archived and available upon request from our privacy team.

11. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or kilovip's handling of your personal data, please contact our dedicated privacy support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" in your subject line for fastest routing.
• Response time: kilovip aims to acknowledge all privacy-related enquiries within 5 business days and provide a full response within 30 calendar days, measured in Bangladesh Standard Time (BST, UTC+6).
• Identity verification: To protect your data, kilovip will verify your identity before processing any access, rectification, or erasure request. You will be asked to confirm your registered email address and may be asked to provide additional verification.