khl88 Privacy Policy

1.1 khl88 (referred to in this policy as "khl88", "we", "us", or "our") operates the online betting and casino platform accessible at khl88.io. As part of providing our services to members in Bangladesh and other eligible markets, we necessarily collect, process, and store certain categories of personal data.

1.2 This Privacy Policy is intended to give you a clear and transparent account of our data practices. We have written it in plain English so that it is understandable to all khl88 members, regardless of their technical or legal background.

1.3 This policy applies to all personal data collected through the khl88 website, mobile-optimised platform, customer support channels, and any other touchpoints through which you interact with khl88. It should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and khl88.

1.4 khl88 is committed to handling all personal data responsibly, securely, and in accordance with applicable data protection principles. We collect only what we need, we protect what we hold, and we are transparent about what we do with it.

2.1 For the purposes of this Privacy Policy, khl88 acts as the data controller in respect of the personal data it collects from members and site visitors. As data controller, khl88 determines the purposes for which personal data is processed and the means by which that processing is carried out.

2.2 Where khl88 engages third-party service providers to process data on its behalf (for example, payment processors or KYC verification providers), those parties act as data processors under khl88's instruction and are bound by contractual data protection obligations that are no less protective than those set out in this policy.

2.3 If you have any questions about how your data is controlled or processed, you may contact our data protection team at: [email protected]

3.1 khl88 collects the following categories of personal data from its members and, in some cases, from visitors who have not yet registered an account:

3.2 khl88 does not collect special category data (such as biometric data, health data, or religious beliefs) except where voluntarily disclosed by a member in connection with a responsible gaming or support request, in which case such data is treated with the highest degree of confidentiality and used only for the stated purpose.

4.1 khl88 collects personal data through the following channels:

• Direct Submission: When you complete the khl88 registration form, update your account profile, submit KYC documents, contact customer support, or participate in any promotion that requires you to provide your details.
• Automated Technical Collection: When you access the khl88 platform, our servers automatically record technical data including your IP address, browser type, device identifier, and session information. This data is collected via standard web server logs and first-party cookies.
• Payment Providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, khl88 receives transaction confirmation data from the relevant payment provider. This is limited to what is necessary to credit or debit your khl88 account accurately.
• KYC Verification Partners: Where khl88 uses a third-party identity verification service to confirm your identity and age, that provider may return a verification result and associated identity data to khl88. The data returned is used solely for account verification purposes.
• Platform Usage: Your betting activity, game session records, and navigation behaviour are recorded automatically as part of normal platform operation. This data is used to manage your account, settle bets, and monitor for responsible gaming signals and fraud.

5.1 khl88 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which khl88 relies are as follows:

• Contractual Necessity: The majority of processing activities are necessary to perform the contract between you and khl88 — specifically, to operate your account, accept your bets, process your deposits and withdrawals, and communicate with you about your account. Without this processing, khl88 cannot provide its services to you.
• Legal Obligation: Certain processing activities are required by law, including identity verification (KYC) for the prevention of underage gambling and financial crime, and the retention of transaction records for anti-money-laundering compliance purposes.
• Legitimate Interests: khl88 processes some data on the basis of its legitimate business interests, including platform security monitoring, fraud detection, responsible gaming oversight, and service improvement analytics. Where legitimate interests are relied upon, khl88 has assessed that those interests are not overridden by your privacy rights.
• Consent: Where khl88 sends you direct marketing communications (such as promotional emails about new offers or seasonal promotions related to events like Eid, BPL, or the T20 World Cup), we do so only on the basis of your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

6.1 khl88 uses the personal data it collects for the following purposes:

• To create, verify, and manage your khl88 account;
• To process deposits made via bKash, Nagad, Rocket, and Upay, and to process approved withdrawal requests;
• To verify your identity and age in accordance with our KYC obligations, and to screen against sanctions lists and politically exposed persons (PEP) databases as required;
• To settle bets and casino game rounds accurately and to maintain a transparent and auditable record of all transactions;
• To provide customer support and to respond to your enquiries, complaints, and responsible gaming requests;
• To detect and prevent fraud, money laundering, account takeover, and other forms of abuse or prohibited conduct;
• To monitor platform usage for responsible gaming signals and to proactively contact members showing indicators of gambling harm;
• To personalise your khl88 experience, including surfacing promotions relevant to your betting preferences and the sporting events you follow (e.g., Bangladesh Premier League cricket matches);
• To send you service communications such as account security alerts, transaction confirmations, and policy update notifications;
• To send marketing communications where you have provided explicit consent to receive them;
• To analyse platform usage in aggregate to improve khl88's products, services, and user experience;
• To comply with any applicable legal, regulatory, or judicial requirement imposed on khl88.

7.1 khl88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances.

7.2 khl88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data necessary to process your deposit or withdrawal instructions.
• KYC and Identity Verification Providers: Third-party identity verification services receive the identity documents and data you submit in order to confirm your identity and age on khl88's behalf.
• Game Software Providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a session token and anonymised player identifier when you launch their games. They do not receive your full identity data.
• Fraud Prevention and Security Services: khl88 may share data with specialist fraud prevention providers and financial crime screening databases where there are reasonable grounds to investigate suspicious account activity.
• Legal and Regulatory Authorities: khl88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or valid legal process, or where khl88 reasonably believes disclosure is necessary to protect the safety of its members or the public.
• Corporate Successors: In the event of a merger, acquisition, or sale of khl88's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to exercise your data rights in connection with it.

8.1 The khl88 platform serves members primarily in Bangladesh. Some of khl88's third-party service providers — including game software providers and technical infrastructure partners — may process data on servers located outside Bangladesh.

8.2 Where personal data is transferred internationally, khl88 takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual data protection clauses that bind the recipient to data security and confidentiality obligations consistent with those set out in this policy.

8.3 By using the khl88 platform and accepting this Privacy Policy, you acknowledge that your data may be processed outside Bangladesh in connection with the services described above. If you have concerns about any specific international transfer, contact [email protected] for further information.

9.1 khl88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

9.2 When personal data is no longer required, it is securely deleted or anonymised in accordance with khl88's internal data disposal procedures. Anonymised data (which can no longer identify any individual) may be retained indefinitely for statistical and analytical purposes.

10.1 khl88 takes the security of your personal data seriously and has implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the khl88 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Password Storage: Account passwords are stored using a strong one-way cryptographic hashing algorithm. khl88 staff cannot view your password in plain text.
• Access Controls: Access to personal data within khl88's systems is restricted to authorised personnel who require it to perform their job functions. Access is governed by role-based permission controls and is logged and audited.
• Infrastructure Security: khl88's server infrastructure is hosted in secure data centres with physical access controls, environmental monitoring, and redundant systems.
• Regular Security Reviews: khl88 conducts periodic internal reviews of its data security practices and takes prompt remedial action where vulnerabilities are identified.
• Incident Response: In the event of a data security incident that affects your personal data, khl88 will notify affected members and, where required, relevant authorities within the timeframe mandated by applicable law.

10.2 While khl88 takes all reasonable precautions, no method of data transmission over the internet is guaranteed to be 100% secure. You also play an important role in keeping your account secure — use a strong, unique password for your khl88 account and do not share your login credentials with any other person.

11.1 khl88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the platform. The following categories of cookies are used:

11.2 khl88 does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks or social media platforms.

11.3 You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary or security cookies may prevent you from logging in or using certain platform features. For detailed guidance on managing cookies in common browsers, refer to your browser's help documentation.

12.1 As a khl88 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and a description of your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data that khl88 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data khl88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly via your account settings.
• Right to Erasure: You may request that khl88 delete your personal data. Note that khl88 may be required to retain certain data for the minimum retention periods described in Section 9, in which case erasure will occur once those periods have elapsed.
• Right to Restrict Processing: In certain circumstances, you may request that khl88 pause the processing of your data while a query or complaint is being resolved.
• Right to Data Portability: You may request that khl88 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of khl88's legitimate interests, including profiling. khl88 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

13.1 The khl88 platform is strictly for adults aged 21 and above. khl88 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the registration and KYC process for all members.

13.2 If khl88 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data, close the associated account, and return any deposited funds to their source. Any winnings generated by an underage account will be voided.

13.3 If you believe that a minor has registered an account on khl88, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

14.1 The khl88 platform may contain references to payment partners, sports data providers, or game software providers. This Privacy Policy applies solely to data processed by khl88 itself. It does not cover the privacy practices of any third-party organisation whose services interact with the khl88 platform.

14.2 When you interact with a third-party service — for example, when initiating a payment via bKash or Nagad — you will be subject to that provider's own privacy policy and terms of use. khl88 encourages you to review the privacy policies of any third-party services you use in connection with your khl88 account.

14.3 khl88 is not responsible for the data practices of third parties and cannot guarantee the security or privacy of data processed by those parties beyond the contractual obligations we have placed on our data processor relationships.

15.1 khl88 reserves the right to update this Privacy Policy at any time. When material changes are made, khl88 will notify registered members by displaying a prominent notice on the platform and, where appropriate, by sending an email to your registered address. The updated policy will state its effective date at the top of the document.

15.2 For non-material changes — such as minor clarifications or typographical corrections — khl88 may update this policy without individual notification. The date shown in the "Last Updated" field at the top of this policy will always reflect the most recent revision.

15.3 Your continued use of the khl88 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any update to this policy, please cease using the platform and contact support to arrange account closure.

16.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how khl88 handles your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days.

16.2 Email: [email protected]

16.3 Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

16.4 Response Time Zone: Bangladesh Standard Time (BST, UTC+6).

16.5 When contacting us regarding a data rights request, please include your registered email address and a clear description of your request. This helps us locate your account records and respond accurately and efficiently.