kh888 Privacy
Policy

Information We Collect

kh888 collects personal data that is necessary for us to provide a safe, secure, and legally compliant online casino and sports betting service to players across Bangladesh. We collect data in three principal ways: information you provide to us directly at registration or during verification, information generated automatically when you use the kh888 platform, and information received from trusted third-party payment and identity verification partners.

The categories of personal data we collect are summarised in the table below:

How We Use Your Data

kh888 uses the personal data it collects for clearly defined operational, legal, and security purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The specific purposes for which we process your personal data are:

1. Account creation and management: To register your kh888 account, verify your identity and age (18+), and maintain your account in good standing throughout your relationship with the platform.
2. Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests back to your registered payment accounts. Transaction records are maintained for audit and compliance purposes.
3. Bonus and promotion administration: To determine your eligibility for welcome bonuses, reload promotions, BPL season offers, and other kh888 promotions, and to prevent fraudulent multi-account bonus claiming.
4. Responsible gaming compliance: To monitor your gambling behaviour for patterns that may indicate problematic play, to enforce deposit limits and session restrictions you have set, and to administer cooling-off periods and self-exclusion requests.
5. Customer support: To respond to your queries, complaints, and support requests submitted via email or live chat, and to maintain records of those interactions for quality assurance purposes.
6. Security and fraud prevention: To detect and prevent money laundering, bonus abuse, multi-accounting, chargeback fraud, and any other prohibited conduct defined in the kh888 Terms & Conditions.
7. Platform improvement: To analyse aggregate, anonymised behavioural data to improve game performance, website navigation, mobile responsiveness, and the overall kh888 user experience for Bangladesh players.
8. Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) regulations and to respond to valid legal requests from competent authorities where required by law.
9. Direct communications: To send you account notifications (deposit confirmations, withdrawal updates, security alerts), and, where you have opted in, promotional communications about new games, bonus offers, and kh888 platform updates.

Legal Basis for Processing

kh888 processes your personal data only where a legitimate legal basis exists for doing so. The legal bases we rely upon, and the data-processing activities associated with each, are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary for kh888 to fulfil its obligations under the player account agreement — including account creation, payment processing, and providing access to games and betting markets.
• Legal obligation: Processing identity verification documents (NID, passport) and transaction records is required by applicable anti-money laundering (AML) regulations and responsible gaming obligations. kh888 cannot offer services without fulfilling these legal requirements.
• Legitimate interests: Processing technical and behavioural data for fraud detection, security monitoring, platform performance analytics, and responsible gaming oversight is carried out in the legitimate interests of kh888 and the wider kh888 player community, provided those interests are not overridden by your privacy rights.
• Consent: Sending you promotional marketing communications (bonus offers, seasonal promotions, new game announcements) is based on your explicit opt-in consent provided at registration or through your account settings. You may withdraw this consent at any time without affecting your access to the platform.

Data Sharing and Third Parties

kh888 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and only with parties that have committed to maintaining appropriate data protection standards.

• Payment processors: Your mobile banking account details (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) are shared with the respective payment processors solely for the purpose of completing deposit and withdrawal transactions. These providers operate under their own privacy and security frameworks.
• Identity verification providers: kh888 may share your KYC documents (NID, passport copy) with a trusted third-party identity verification service for the purpose of confirming your age and identity during account verification. These providers are contractually bound to process your data only for verification purposes.
• Game software providers: When you play games hosted by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), the relevant studio's game client may receive your player ID and game session data for the purpose of managing game rounds and recording outcomes. Your full personal identity details are not transferred to game studios.
• Fraud and AML compliance: Where required by law or by the terms of our risk management framework, kh888 may share transaction data or account information with competent authorities, financial intelligence units, or law enforcement agencies in response to a lawful request.
• Professional advisers: kh888 may share personal data with its legal advisers, auditors, and accountants on a strictly need-to-know basis and subject to professional confidentiality obligations.

Cookies and Tracking Technologies

kh888 uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly, to protect your account security, and to understand how players interact with the site so we can improve it. A cookie is a small text file placed on your device by your browser when you visit kh888.bio.

The categories of cookies kh888 uses are described below:

kh888 does not use third-party advertising cookies or retargeting pixels that track your browsing activity on websites outside kh888.bio. You may configure your browser to block or delete cookies at any time; however, blocking essential cookies will prevent you from maintaining a logged-in session on kh888 and may impair core platform functionality.

Data Security

kh888 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data in transit between your browser or mobile device and kh888's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login sessions, deposit flows, withdrawal requests, and all account management operations.
• Data at rest encryption: Personal data stored in kh888's databases is encrypted at rest using AES-256 encryption. Raw credentials (passwords, PINs) are never stored; passwords are hashed using a one-way cryptographic function.
• Access controls: Access to databases containing player personal data is strictly limited to authorised kh888 personnel who require it to perform their job functions. Access is governed by role-based permissions, multi-factor authentication for administrative accounts, and audit logging of all access events.
• Intrusion detection: kh888 operates 24/7 automated monitoring for unusual access patterns, brute-force login attempts, and other potential security incidents. Alerts are reviewed by the kh888 security team in Bangladesh Standard Time (BST, UTC+6).
• Penetration testing: kh888 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in risk to your rights or interests, kh888 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

Data Retention

kh888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods that apply to different categories of data are:

• Active account data: For the duration of your registered account relationship with kh888, plus a post-closure retention period of 5 years. This allows kh888 to comply with AML record-keeping requirements and to resolve any disputes that may arise after account closure.
• Transaction records: Deposit and withdrawal records, including associated mobile banking account identifiers, are retained for 5 years from the date of each transaction in accordance with standard financial record-keeping practice.
• KYC and identity documents: Copies of NID, passport, or other verification documents are retained for the duration of the account relationship plus 5 years. Documents are securely deleted or irreversibly anonymised upon expiry of this period.
• Support communications: Email correspondence and chat records with the kh888 support team are retained for 3 years from the date of each interaction, after which they are deleted.
• Technical and analytics data: Server logs and aggregated analytics data are retained for a maximum of 12 months, after which they are deleted or anonymised so that individual players can no longer be identified.
• Marketing consent records: Records of your consent to (or withdrawal from) marketing communications are retained for the duration of your account relationship and for 2 years following account closure, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is either securely deleted from kh888's systems or rendered permanently anonymous. Anonymous data (from which no individual can be identified) may be retained indefinitely for aggregate statistical analysis.

Your Rights as a Data Subject

kh888 respects your rights with respect to the personal data we hold about you. The following rights are available to all registered kh888 players:

1. Right of access: You may request a copy of the personal data kh888 holds about you at any time. kh888 will provide this in a clear, readable format within 14 calendar days of receiving your verified request.
2. Right to rectification: If any personal data kh888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your kh888 account settings panel; for changes to identity or KYC data, please contact the support team.
3. Right to erasure ("right to be forgotten"): You may request that kh888 delete your personal data. We will honour such requests where there is no overriding legal obligation requiring us to retain the data (for example, AML record-keeping obligations may prevent immediate deletion of transaction records). Where deletion is not immediately possible, kh888 will explain the applicable retention period and delete the data at the earliest lawful opportunity.
4. Right to restriction of processing: You may request that kh888 restrict (but not delete) the processing of your personal data — for example, while you contest the accuracy of data we hold or while we investigate a complaint you have raised.
5. Right to data portability: You may request that kh888 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
6. Right to object: You may object to the processing of your personal data where kh888 relies on legitimate interests as its legal basis. kh888 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to withdraw consent: Where kh888 relies on your consent as the legal basis for processing (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact the kh888 support team at [email protected] (plain text — not a clickable link). Please include your registered mobile number and a brief description of your request. kh888 may need to verify your identity before processing your request to protect against unauthorised access to account data. We will respond to all valid data subject requests within 14 calendar days.

Children and Minors

kh888 is an adult-only platform. The kh888 platform is strictly intended for players who are 18 years of age or older. kh888 does not knowingly collect, store, or process personal data belonging to individuals under the age of 18.

During account registration, all players are required to confirm that they are 18 years of age or older. Where kh888 has reasonable grounds to suspect that a registered account is operated by a minor — for example, through identity verification checks, account behaviour patterns, or a report from a third party — the account will be suspended pending age verification. If it is confirmed that the account holder is under 18, the account will be permanently closed and any deposited funds will be returned to the originating payment method.

Updates to This Policy

kh888 reviews and updates this Privacy Policy periodically to reflect changes in the platform's data-processing activities, changes in applicable legal or regulatory requirements, or feedback received from the kh888 player community in Bangladesh. The current version of this Privacy Policy is always accessible at kh888.bio/privacy-policy.

When material changes are made to this Privacy Policy, kh888 will update the "Last updated" date at the top of this document. Where a change significantly affects how your personal data is processed, kh888 will endeavour to notify registered players via the email address on file prior to the change taking effect. It is your responsibility to review this policy periodically and to ensure your registered email address is current so that you receive such notifications.

Continued use of the kh888 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this Privacy Policy, you should cease using the kh888 platform and may request account closure by contacting [email protected] (plain text — not a clickable link).