Kevplay operates the website https://kevplay.com and provides M3U playlist credentials and IPTV subscription reseller services. Kevplay is a playlist provider and reseller of access credentials — it is not a broadcaster, content host, or streaming platform. Kevplay does not store, transmit, or make available any audio‑visual content itself. The M3U playlists we deliver contain links and metadata that enable end‑users to access third‑party streaming sources using compatible media players and devices. Our service is strictly limited to the provision of playlist URLs, server credentials, and technical support. We do not control or assume responsibility for the content accessible through those playlists.
2. Data We Collect
We collect the following categories of personal data when you use our services, register an account, or interact with our website:
Account Information: Name, email address, username, and password (hashed).
Payment Data: Transaction identifiers and amount. All payment processing is handled by third‑party processors (see Section 4). Kevplay never stores raw credit/debit card numbers, CVV codes, or bank account details.
IP Address: Your public IP address when you access our website, use the playlist URLs, or connect to our servers.
Device Information: Device type, operating system, browser type, and version; for IPTV‑capable devices (Smart TV, Android, iOS, MAG, Enigma2, PC/Mac, Firestick, Roku) we may collect device identifiers and firmware version.
Usage Logs: Timestamps of playlist requests, connection attempts, stream quality selections (4K Ultra HD, Full HD 1080p, HD 720p, SD), and errors. We do not monitor the specific content played.
Cookies and Similar Technologies: See Section 5 and our Cookie Policy at https://kevplay.com/cookies/.
3. Legal Basis for Processing (EU GDPR & US Law)
We process your personal data only when we have a lawful basis under Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and in compliance with applicable US laws including the California Consumer Privacy Act (CCPA) and the Digital Millennium Copyright Act (17 U.S.C. § 512). The specific bases are:
Account and Payment Data – Contractual Necessity (Art. 6(1)(b) GDPR): We process your name, email, and payment information to create and manage your account, process subscription payments (e.g., 24H TEST: USD2/year, Standard: USD48/year, trial €2), deliver the M3U playlists, and provide customer support via WhatsApp (+1234567890) and email.
Analytics and Usage Logs – Legitimate Interest (Art. 6(1)(f) GDPR): We process IP addresses, device information, and usage logs to maintain the security and stability of our services, detect and prevent fraud or abuse, improve service performance (99.9% uptime SLA), and optimise stream quality delivery. This processing is necessary for our legitimate interest in running a secure, reliable M3U reselling business and does not override your rights.
Marketing Communications – Explicit Consent (Art. 6(1)(a) GDPR): We send promotional emails (e.g., new playlist updates, plan offers) only after you have given your explicit consent via a clear opt‑in checkbox. You may withdraw consent at any time.
US CCPA Compliance: California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. Kevplay does not sell your personal data. Under the DMCA (17 U.S.C. § 512), we maintain a designated agent for copyright takedown notices – contact information is available upon request.
4. Third-Party Processors
We engage the following categories of third‑party service providers who process your data on our behalf:
Payment Gateways: We use third‑party payment processors to handle cryptocurrency transactions (e.g., Coinbase Commerce, Binance Pay). These processors receive transaction amounts and wallet addresses; they do not receive any other personal data from us. We do not store your crypto wallet private keys.
Analytics Providers: We use web analytics tools (e.g., Google Analytics, Matomo) to analyse website traffic and usage patterns. IP addresses are anonymised where possible.
Email Service Providers: We use a third‑party email delivery service (e.g., SendGrid, Mailgun) to send transactional emails (order confirmations, password resets) and marketing emails (with your consent).
Infrastructure Providers: Our servers are hosted by reputable cloud providers (e.g., AWS, DigitalOcean) which may store logs and backups.
All third parties are contractually bound to process data only on our instructions and to implement appropriate security measures.
5. Cookies
Our website uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and remember your preferences. For a detailed description of the cookies we use, their purposes, and how you can control them, please see our dedicated Cookie Policy at https://kevplay.com/cookies/.
By continuing to use https://kevplay.com you consent to the use of cookies in accordance with our Cookie Policy.
6. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations:
Account Data: We retain account information (name, email, IP address, device data, usage logs) for 3 years after your last activity (e.g., last login, playlist request, or support contact). After that period, the account and associated data are permanently deleted or anonymised.
Payment Records: Transaction records (amount, date, payment method) are retained for 7 years after the transaction date to comply with applicable tax laws (EU VAT directives and US IRS requirements).
Marketing Consent Records: Evidence of your opt‑in consent is retained for the duration of processing plus 2 years after withdrawal or termination.
Backups: Archived backups may retain data for up to 90 days before overwriting.
7. Your Rights Under EU GDPR and US Law
Depending on your jurisdiction, you have the following rights regarding your personal data:
European Union (GDPR)
Right of Access (Art. 15): Request confirmation whether we process your data and obtain a copy.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) (Art. 17): Request deletion of your data where it is no longer necessary, consent is withdrawn, or processing is unlawful.
Right to Restriction of Processing (Art. 18): Request that we limit processing while a dispute is resolved.
Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine‑readable format and transfer it to another controller.
Right to Object (Art. 21): Object to processing based on legitimate interests (including analytics) or direct marketing.
Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
United States (CCPA & DMCA)
Right to Know: California residents may request disclosure of categories and specific pieces of personal data collected, used, or disclosed.
Right to Delete: Request deletion of personal data collected from you, subject to exceptions (e.g., legal obligations).
Right to Opt Out of Sale: Kevplay does not sell personal data; no opt‑out is necessary.
Non‑Discrimination: We will not discriminate against you for exercising any CCPA rights.
DMCA Takedown Notices: As a playlist reseller, we have a designated DMCA agent. To submit a copyright infringement notice, please contact contact@kevplay.com with subject “DMCA Notice”. We respond to valid notices in accordance with 17 U.S.C. § 512.
To exercise any of these rights, please contact us using the details in Section 10. We will respond within the legally required timeframe (usually 30 days for GDPR, 45 days for CCPA).
8. International Data Transfers
Kevplay operates globally. Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our third‑party service providers are located. When we transfer data from the EEA to countries not deemed adequate by the European Commission, we rely on appropriate safeguards, such as:
Standard Contractual Clauses (SCCs) adopted by the European Commission (2021/914);
Binding Corporate Rules (where applicable); or
Data Processing Agreements that ensure an equivalent level of protection.
For transfers to the United States, we also rely on the EU‑US Data Privacy Framework where applicable. You may request a copy of the relevant safeguards by contacting us.
9. Children’s Data
Our service is not directed at, nor intended for, individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at contact@kevplay.com. We will take steps to delete such data promptly.
10. Contact and Complaints
Data Controller
Kevplay is the data controller for the personal data collected under this policy. You can contact us at:
Website: https://kevplay.com
Email: contact@kevplay.com
WhatsApp Support: +1234567890
Supervisory Authority
If you are in the European Union, you have the right to lodge a complaint with your local data protection supervisory authority. Contact details for EU data protection authorities can be found at the European Data Protection Board website (edpb.europa.eu). For UK residents, the Information Commissioner’s Office (ico.org.uk) is the relevant authority.
If you are in the United States and believe we have violated the CCPA, you may also contact the California Attorney General’s office or the Federal Trade Commission.
We encourage you to contact us first so we can resolve any concerns directly.