Privacy Policy — How khale88 Protects Your Data

When you register for and use an account on khale88, we collect a range of personal information necessary to operate the platform, verify your identity, process your transactions, and comply with applicable legal and anti-money laundering obligations. The categories of information we collect are described in detail below.

Registration & Account Data

When you create an account on khale88, we collect the following information that you provide directly:

• Full legal name — as it appears on your National Identity Card (NID) or passport.
• Date of birth — to verify that you are 18 years of age or older and legally permitted to use the platform.
• Residential address — including district, division, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Contact email address — used for account communications, transaction confirmations, and support correspondence.
• Mobile number — used for account security, two-factor authentication, and linking to your MFS payment accounts (bKash, Nagad, Rocket, Upay).
• Username and encrypted password — your chosen account credentials. Passwords are stored using industry-standard one-way hashing and are never stored in plain text.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect and process copies of the following documents:

• National Identity Card (NID), valid passport, or Bangladesh driving licence.
• Proof of address documents such as utility bills, bank statements, or official correspondence issued within the past 90 days.
• Proof of payment method, such as a screenshot confirming your bKash, Nagad, or Rocket account number is registered under your name.
• A selfie photograph taken alongside your identity document, where enhanced verification is required.

Financial Transaction Data

We collect details of every financial transaction conducted through your khale88 account, including:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳ BDT).
• The payment method used for each transaction (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard).
• Transaction timestamps, reference numbers, and processing status.
• Partial payment account identifiers (e.g., last four digits of a card, or partial MFS account number) for fraud prevention and chargeback resolution purposes.

Platform Usage & Behavioural Data

We automatically collect certain technical and behavioural data when you access and use the khale88 platform:

• IP address, device type, operating system, and browser version.
• Session timestamps, pages visited, games played, bets placed, and navigation patterns.
• Betting history — including stakes, markets, outcomes, and settlement details for all sports bets (cricket, football, kabaddi) and casino game sessions.
• Bonus usage and wagering requirement progress data.
• Device fingerprint data used to detect multi-accounting and fraud.

khale88 uses the personal information we collect for the following clearly defined purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent or where we are required to do so by law.

Where we rely on consent as the legal basis for processing — for example, sending personalised promotional offers and bonus notifications — you may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting support@khale88. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Where we rely on legitimate interest as the legal basis for processing, we have conducted a balancing test and determined that our legitimate interests in operating a safe, secure, and compliant gambling platform are not overridden by your interests, rights, or freedoms — particularly given the safeguards we have implemented and described in this policy.

khale88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Payment Processing Partners

To facilitate deposits and withdrawals, we share transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card schemes (Visa, Mastercard). These partners receive only the data necessary to process the specific transaction and are bound by their own data protection obligations and the terms of their service agreements with khale88.

Game Technology Providers

The casino games and live dealer tables available on khale88 are powered by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data and game outcome data for the purpose of game integrity verification, RTP auditing, and anti-cheating monitoring. No personally identifiable information beyond a session identifier is shared with game providers.

Identity Verification Services

Where we use third-party KYC verification technology to process identity documents, your KYC data may be shared with our verification service provider for the sole purpose of completing the verification process. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.

Legal & Regulatory Authorities

We may be required to disclose your personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities in Bangladesh or internationally where we are legally compelled to do so, including but not limited to anti-money laundering (AML) reporting obligations, court orders, or fraud investigations. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.

Business Transfers

In the event that khale88 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy implications via email or a prominent notice on the khale88 platform prior to the transfer taking effect.

khale88 uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, remember your preferences, and collect anonymised analytics data that helps us improve the platform experience for all Bangladeshi players.

Types of Cookies We Use

Managing Your Cookie Preferences

You can manage non-essential cookies (functional, analytics, and marketing) through your browser settings at any time. Most modern browsers — including Chrome, Firefox, Samsung Internet (widely used in Bangladesh), and Opera Mini — allow you to view, delete, and block cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging into your khale88 account and using core platform features.

Disabling analytics or functional cookies will not affect your ability to place bets, deposit, or withdraw funds, but may result in a less personalised experience on return visits.

khale88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements applicable to online gambling platforms operating in or serving the Bangladesh market.

The following general retention periods apply to the main categories of personal data we hold:

• Account registration data — retained for the duration of your account, plus a minimum of 5 years following permanent account closure, in accordance with financial record-keeping obligations.
• KYC identity documents — retained for a minimum of 5 years from the date of the last transaction on your account, or longer if required by a specific regulatory or law enforcement request.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, in accordance with anti-money laundering record-keeping standards.
• Customer support correspondence — retained for 3 years from the date of the last support interaction, to enable dispute resolution and quality improvement.
• Betting and game session history — retained for a minimum of 5 years from the session date for game integrity, dispute resolution, and responsible gaming monitoring purposes.
• Marketing consent records — retained for the duration of consent plus 3 years, to demonstrate compliance in the event of a complaint or audit.
• Anonymised analytics data — may be retained indefinitely as it contains no personally identifiable information and cannot be used to identify any individual player.

When personal data is no longer required and no legal retention obligation applies, khale88 will securely delete or anonymise the data using industry-standard data destruction processes. Physical copies of documents are shredded; digital records are overwritten using recognised data sanitisation standards.

All personal data collected from khale88 players is stored on servers located within a secure data centre. Data in transit is protected by 256-bit SSL/TLS encryption. Data at rest is encrypted using AES-256 encryption. Access to personal data is restricted to authorised khale88 staff and service providers on a strict need-to-know basis, enforced through role-based access controls and audit logging.

As a player on khale88, you hold the following rights with respect to your personal data. These rights are not absolute in all cases — some are subject to legal retention obligations that take precedence — but we are committed to honouring every request that is consistent with our legal obligations.

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a verified request, in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (email, address) directly in your account settings; for corrections to KYC data, please contact support@khale88 with supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will honour erasure requests where the data is no longer necessary for the original purpose and no overriding legal retention obligation applies. Note that financial transaction records, KYC documents, and betting history are subject to mandatory retention periods that prevent immediate erasure.
• Right to Restriction of Processing: In certain circumstances (e.g., while a dispute is being investigated), you may request that we restrict processing of your personal data to storage only, without any active use.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a portable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interest as the legal basis. You may also object at any time to receiving marketing communications by updating your account preferences or contacting support@khale88.
• Right to Withdraw Consent: Where we rely on your consent for any processing activity, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to support@khale88 with the subject line "Data Rights Request". Please include your registered account email address and a brief description of your request. We will acknowledge your request within 5 business days and aim to provide a full response within 30 calendar days. In complex cases, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reason.

We will not charge a fee for exercising your data rights except in cases where requests are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, providing written reasons for our decision.

khale88 implements a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All communications between your browser or device and the khale88 servers are encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols. Our SSL certificate is issued by a recognised certificate authority and is renewed proactively.
• AES-256 Encryption at Rest: All personally identifiable data stored in our databases — including KYC documents, payment identifiers, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. We use a one-way cryptographic hashing algorithm with salt to ensure that even in the unlikely event of a database breach, your password cannot be recovered.
• Two-Factor Authentication (2FA): We offer optional two-factor authentication for your khale88 account, adding an additional layer of security beyond your password for account login and withdrawal confirmation.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems (IDS/IPS) that monitor for and automatically block suspicious activity.
• Penetration Testing: khale88 conducts regular security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.

Organisational Safeguards

• Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and individual user authentication for all internal systems.
• All khale88 staff and contractors with access to personal data are required to complete data protection training and are bound by confidentiality obligations in their employment or service agreements.
• All third-party service providers that process personal data on our behalf are required to sign data processing agreements confirming their compliance with data protection obligations and the purposes for which data may be used.
• We maintain a data breach response procedure. In the event of a data breach that poses a risk to the rights and freedoms of our players, we will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

khale88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When we make material changes to this policy, we will notify registered account holders by email and post a prominent notice on the khale88 platform for a period of at least 30 days prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is stated at the top of this page. We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the khale88 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which khale88 processes your personal data, please contact our support team using the details below. We take all privacy enquiries seriously and aim to respond within 2 business days.

Contact Details

• Support Email: support@khale88 (plain text — not a clickable link)
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry" or "Data Rights Request"
• Languages Supported: English and Bengali
• Availability: 24/7, 365 days per year including Eid, Pohela Boishakh, Victory Day, and all public holidays (Bangladesh Standard Time, UTC+6)
• Response Target: Standard privacy queries within 2 business days; formal data rights requests within 30 calendar days

This Privacy Policy is governed by and construed in accordance with applicable data protection principles. Any dispute relating to this Privacy Policy shall be subject to the dispute resolution procedure set out in our Terms & Conditions. For responsible gaming-related data queries — including self-exclusion record handling — please also refer to our Responsible Gaming page.