Privacy Policy for kelibet

Data We Collect

kelibet collects personal data through several channels: directly from you when you register and use our platform, automatically through your device and browser interactions, and in limited cases from trusted third-party partners. We collect only the data that is necessary and proportionate to the purposes described in this Policy.

The categories of personal data we collect include:

We do not knowingly collect personal data from individuals under the age of 18. If we discover that data has been collected from an underage individual, it will be deleted immediately and the associated account will be closed. Please refer to our Terms & Conditions for our full age verification policy.

How We Use Your Data

kelibet processes your personal data for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The primary purposes for which kelibet processes personal data are:

• Account Management: To create, verify, maintain, and administer your kelibet player account, including processing your registration details, authenticating your identity at login, and managing your account preferences.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods. Financial data is processed in compliance with applicable payment industry standards.
• Identity & Age Verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. This is a mandatory legal and operational obligation for kelibet.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns and account activity for signs of money laundering, fraud, or other financial crime, in accordance with applicable AML obligations.
• Service Delivery: To deliver the games, betting markets, promotions, bonuses, and other services you have requested or are entitled to as a registered kelibet player.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance via our support channels.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, to enforce deposit limits, session time reminders, cool-off periods, and self-exclusion requests, and to fulfil our duty of care obligations.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent unauthorised access, cheating, collusion, bonus abuse, and other security threats to the integrity of the kelibet platform.
• Marketing Communications: With your explicit consent, to send you promotional offers, bonus notifications, seasonal promotions (such as Eid or BPL season offers), and platform updates by email or SMS. You may withdraw consent at any time.
• Analytics & Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the kelibet platform, optimise game performance, and enhance the overall player experience.
• Legal Compliance: To comply with any applicable legal obligation, court order, regulatory requirement, or lawful instruction from a competent authority.

We will not sell your personal data to third parties for their own marketing purposes. We do not engage in profiling that produces significant legal effects on individual players without their knowledge.

Legal Basis for Processing

For each category of personal data we process, kelibet relies on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and kelibet (i.e., to provide the services you registered for, process your payments, and manage your account). This is the primary basis for most of our core data processing activities.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification requirements, anti-money laundering obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for kelibet's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided such interests are not overridden by your rights and interests.
• Consent: For specific processing activities such as direct marketing communications, we rely on your freely given, specific, informed, and unambiguous consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

Where kelibet relies on legitimate interests as the legal basis for processing, we have conducted an assessment to ensure that our interests are balanced against and do not unduly prejudice your fundamental rights and freedoms. If you would like further information about this assessment, please contact us at support@kelibet.

Cookies & Tracking

kelibet uses cookies and similar tracking technologies (including pixels and local storage) to ensure the platform functions correctly, to remember your preferences, and to gather analytical data that helps us improve our services. A cookie is a small text file placed on your device when you visit our platform.

The types of cookies used by kelibet are as follows:

You may control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use kelibet. Disabling analytical or marketing cookies will not affect your access to core platform functionality.

Data Sharing & Disclosure

kelibet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

• Payment Processors: We share your financial data with our payment processing partners (including bKash, Nagad, Rocket, Upay, and card processing networks) strictly to the extent necessary to process your deposit and withdrawal transactions. These partners are bound by their own privacy and security obligations.
• Game Studio Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (e.g., game round IDs, bet values) necessary to facilitate gameplay and resolve game disputes. They do not receive your full identity data.
• Identity Verification Services: Third-party KYC providers may process copies of your identity documents and other verification data on our behalf to confirm your identity and age. They act as data processors under our instruction and are bound by strict confidentiality obligations.
• Fraud & AML Detection Partners: We may share transaction and behavioural data with specialist fraud detection and anti-money laundering service providers to fulfil our legal obligations and protect the integrity of the platform.
• Legal & Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, regulators, or other public authorities where we are legally required or permitted to do so, or where disclosure is necessary to protect the rights, property, or safety of kelibet, its players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of kelibet's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties with whom kelibet shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared. We do not permit our third-party service providers to use your data for their own independent marketing or commercial purposes.

Data Retention

kelibet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following retention principles apply:

• Active Account Data: Personal data associated with an active kelibet account is retained for the duration of the account's active lifecycle and for a minimum of five (5) years following account closure. This is necessary to comply with our AML obligations and to resolve any post-closure disputes.
• Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC & Verification Documents: Identity verification documents (including copies of national IDs, passports, and proof of address) are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Records of support interactions, complaints, and dispute resolutions are retained for a minimum of three (3) years from the date of the final communication in each case.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for as long as they are needed to demonstrate compliance, even if you have withdrawn consent for active marketing communications.
• Anonymised Analytics Data: Anonymised, aggregated usage data that cannot be linked back to any individual player may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders individual identification impossible. Where deletion is not immediately practicable due to technical constraints (such as backup storage cycles), the data will be securely isolated until deletion can be completed.

Your Privacy Rights

kelibet respects your rights in relation to your personal data. As a player on our platform, you have the following rights, subject to applicable legal limitations and verification of your identity:

• Right of Access: You have the right to request a copy of the personal data kelibet holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain data directly through your account settings, or contact our support team for assistance.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal obligation to retain certain data for AML, fraud prevention, and regulatory compliance purposes, which may override an erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where we process your data by automated means on the basis of your consent or contractual necessity, you have the right to receive a structured, commonly used, machine-readable copy of your data for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have the right to object at any time to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to support@kelibet with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days. In complex cases, this period may be extended by a further 60 days, and you will be notified accordingly.

If you are not satisfied with how kelibet has handled your personal data or responded to your rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Data Security

kelibet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. Our security framework includes, but is not limited to:

• SSL/TLS Encryption: All data transmitted between your browser or device and kelibet servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting kelibet.
• At-Rest Encryption: Sensitive data stored on our servers — including identity documents, financial records, and password hashes — is encrypted at rest using strong cryptographic standards.
• Password Security: Player passwords are never stored in plain text. We use one-way cryptographic hashing algorithms to store password credentials so that even kelibet staff cannot retrieve your original password.
• Access Controls: Access to personal data within kelibet's internal systems is granted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality agreements and regular access review procedures.
• Payment Tokenisation: Card payment details processed via Visa or Mastercard are tokenised by our payment processor and are never stored on kelibet's own servers in raw form. bKash and Nagad transactions are processed via their respective secure APIs.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for anomalous activity, unauthorised access attempts, and security incidents. Automated alerts and response procedures are in place to address detected threats promptly.
• Regular Security Reviews: kelibet conducts periodic internal security assessments and engages specialist security professionals to review our data protection posture on an ongoing basis.

Despite our extensive security measures, no internet-based platform can guarantee absolute security. You also have an important role to play in keeping your account secure — choose a strong, unique password, do not share your login credentials with anyone, and contact us immediately at support@kelibet if you suspect unauthorised access to your account.

Third-Party Services

The kelibet platform integrates with a number of third-party service providers to deliver its full range of features. When you interact with these integrated services, data may be processed by the relevant third party in accordance with their own privacy policies. kelibet does not control and is not responsible for the privacy practices of third-party providers, though we do select partners that demonstrate a credible commitment to data security and privacy.

Key third-party integrations and their data relevance include:

• Game Studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Game providers receive anonymised game session data to facilitate gameplay, calculate RNG outcomes, and enable round-by-round dispute resolution. They do not receive your full personal profile.
• Payment Service Providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks): These providers process the payment instruction data required to complete your deposit or withdrawal transaction. Each provider operates under its own privacy policy and financial regulatory obligations.
• Analytics Platforms: We may use analytics tools that process anonymised, aggregated platform usage data to generate insights about platform performance. These tools do not receive personally identifiable information.
• Cloud Infrastructure Providers: kelibet's platform is hosted on secure cloud infrastructure. The hosting provider processes technical data (such as server logs and IP addresses) as part of delivering reliable infrastructure services. They act as data processors under our instruction and are bound by data processing agreements.

Links to third-party websites or services that may appear within the kelibet platform are provided for informational purposes. Visiting any linked third-party site is governed entirely by that site's own terms and privacy policy. kelibet accepts no responsibility for the content or data practices of third-party websites.

Policy Updates

kelibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform features. When material changes are made, we will take reasonable steps to notify you — which may include posting a notice on the kelibet website or sending a notification to your registered email address.

The "Effective Date" displayed at the top of this page indicates when the current version of this Policy came into force. Continued use of the kelibet platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage all players to review this page periodically to stay informed of how kelibet protects their data.

If any amendment to this Policy materially reduces your rights or significantly changes how your data is processed in ways that you do not accept, you may close your account by contacting support@kelibet. Your remaining real-money balance will be returned to your verified payment method in accordance with our standard withdrawal procedures.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kelibet processes your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently .

When submitting a privacy rights request, please include your registered username or email address and a brief description of your request so that we can verify your identity and process your enquiry efficiently. Please do not include sensitive financial data such as full card numbers or bKash/Nagad PINs in any email correspondence.

All privacy communications sent to kelibet are treated as strictly confidential and are handled exclusively by authorised staff members who are bound by confidentiality obligations.