kha88 Privacy Policy

1 Information We Collect

kha88 collects the following categories of personal information from players in order to provide, secure, and improve the Platform:

You are not required to provide all of the above categories to access basic features of the Platform; however, failure to provide mandatory information (such as identity and contact data) will prevent us from completing account registration or processing financial transactions.

2 How We Collect Your Data

kha88 collects personal information through the following channels:

• Direct submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, session logs, and similar technologies (see Section 6).
• Third-party sources: Identity verification agencies, fraud detection services, and payment processors may share data with us where required to verify your identity or assess transaction risk.
• Device and browser signals: Your device may transmit certain data automatically (such as screen resolution, language preferences, and time zone) when you access the Platform.

3 How We Use Your Information

kha88 uses your personal information for the following purposes:

• Account management: Creating, verifying, and maintaining your player account; authenticating your identity on each login; and managing your account settings and preferences.
• Transaction processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; and processing withdrawal requests to your nominated payment method.
• Legal compliance and KYC: Verifying your age (21+) and identity in accordance with our anti-money laundering and responsible gaming obligations; retaining transaction records as required by applicable regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, multi-accounting, and abuse of bonuses or promotions.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via our 24/7 support team at [email protected].
• Service personalisation: Tailoring game recommendations, promotional offers (such as BPL and T20 World Cup specials), and content to your demonstrated preferences and playing history.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling; enabling deposit limits, cooling-off periods, and self-exclusion tools at your request.
• Platform improvement: Analysing aggregated usage data to improve Platform performance, game selection, user interface, and overall player experience.
• Marketing communications: Sending you relevant promotional offers, bonuses, and Platform updates by email or SMS — only where you have opted in or where permitted under applicable law. You may opt out at any time.

4 Legal Basis for Processing

kha88 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and kha88 — specifically, to operate your account, process transactions, and deliver the services you have registered for.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification (21+), anti-money laundering checks, and record-keeping obligations.
• Legitimate interests: Processing for purposes that serve the legitimate interests of kha88 or our players, including fraud detection, Platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your privacy rights.
• Consent: Where we rely on your explicit consent for processing — primarily for direct marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

kha88 does not sell your personal information. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard — to facilitate deposits and withdrawals. Each payment partner operates under its own privacy policy and data security standards.
• Identity verification providers: Third-party KYC and age-verification services used to confirm your identity and age in connection with account registration and withdrawal processing.
• Fraud prevention services: Anti-fraud and risk-management platforms used to detect suspicious activity, multi-accounting, and financial crime across the Platform.
• Game providers: Certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive session-level technical data (not personally identifiable) necessary to operate their games on the Platform.
• IT and cloud infrastructure providers: Hosting, database, and security service providers under strict data processing agreements requiring them to handle your data in accordance with this Policy.
• Legal and regulatory authorities: Where required by law, court order, or regulatory directive, kha88 may disclose personal data to relevant authorities. We will notify you of such disclosure where legally permitted to do so.

6 Cookies & Tracking Technologies

kha88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously entered form data to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform — including which pages are most visited, session durations, and navigation paths — to help us improve Platform performance and design.
• Security and fraud-prevention cookies: Help us identify and prevent fraudulent login attempts, bot activity, and multi-account abuse by tracking device fingerprints and session patterns.

Most browsers allow you to manage cookie preferences through your browser settings, including the ability to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform, particularly authentication and session management features. kha88 does not use third-party advertising or behavioural targeting cookies.

7 Data Retention

kha88 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following retention principles:

• Active accounts: Personal data is retained for the full duration of your account being open and active on the Platform.
• Closed accounts: Following account closure, we retain identity, contact, and transaction records for a minimum of five (5) years in accordance with anti-money laundering obligations and general legal record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Customer support records are retained for three (3) years from the date of the last interaction to facilitate dispute resolution and service improvement.
• Marketing data: Where you have opted in to marketing communications, we retain your marketing preferences until you opt out or request erasure. Following opt-out, we retain a suppression record to ensure we do not inadvertently contact you again.

8 Data Security

kha88 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS encryption: All data transmitted between your device and the kha88 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when accessing kha88.io.
• Encrypted data storage: Sensitive data — including identity documents, payment details, and passwords — is stored in encrypted form. Passwords are hashed using a one-way cryptographic algorithm; kha88 staff cannot retrieve your password in plain text.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific categories of data are permitted to access them, and all access is logged and audited.
• OTP and two-factor authentication: kha88 offers OTP-based two-factor authentication for player accounts. We strongly recommend enabling this feature through your account security settings.
• Fraud monitoring systems: Automated fraud detection systems monitor the Platform in real time for suspicious patterns including unusual login locations, rapid bet patterns, and payment anomalies.
• Regular security reviews: kha88 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in Platform infrastructure.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, kha88 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

9 Your Privacy Rights

As a kha88 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

kha88 will respond to all privacy rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days and will notify you accordingly. Some rights are subject to legal retention obligations — for example, we cannot erase transaction records that we are legally required to retain for anti-money laundering compliance purposes.

10 Third-Party Payment Processors

To process deposits and withdrawals, kha88 works with established payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. When you initiate a financial transaction on the Platform, relevant payment data is shared with the applicable processor solely to complete that transaction.

Each payment processor operates under its own privacy policy and data security framework. kha88 selects payment partners on the basis of their security standards and reliability, but we cannot be held responsible for the data practices of independent third-party processors. We encourage you to review the privacy policy of your preferred payment provider.

11 Children & Minors

The kha88 Platform is strictly intended for adults aged 21 years and above. kha88 does not knowingly collect, store, or process personal data from individuals under the age of 21. If you are under 21, you must not create an account or attempt to use any feature of the Platform.

kha88 uses age verification tools and manual review processes to prevent underage access. We reserve the right to request government-issued photo identification at any time to confirm that a player meets the minimum age requirement of 21 years.

12 Changes to This Policy

kha88 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, legal obligations, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email to the address on file and display a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

Your continued use of the Platform after the effective date of any updated Policy constit utes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

We recommend that you review this Policy periodically to stay informed about how kha88 protects your personal data. The "Last Updated" date at the top of this page always reflects the most recent revision.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kha88 handles your personal data, please contact our dedicated Privacy team:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days, Bangladesh Standard Time (BST, UTC+6).
• Data rights requests: Include your registered username and the nature of your request. We will verify your identity before processing any data access, rectification, or erasure request.