khe88 Privacy Policy — How We Handle Your Personal Data

khe88 is committed to protecting the privacy and personal data of all users of its online betting and casino platform. This Policy applies to all personal information collected by khe88 in connection with the operation of the khe88 platform, including information collected through the khe88.io website, any associated mobile-optimised interface, and any communications between you and khe88 (including support emails and live chat interactions).

khe88 operates as an online betting and gaming platform serving users primarily located in Bangladesh. All personal data processing described in this Policy relates to the operation of the khe88 platform and the provision of betting, casino, and associated services to registered users.

khe88 takes its data protection responsibilities seriously. We have implemented technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures are reviewed and updated regularly in line with industry best practice.

If you have any questions about how khe88 handles your personal data, or if you wish to exercise any of your data rights, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

khe88 collects the following categories of personal data from users of the platform. We collect only the data that is necessary for the purposes described in this Policy and do not collect sensitive personal data (such as biometric data or health information) unless specifically required by law.

khe88 does not collect or process special categories of sensitive personal data including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for unique identification, data concerning health, or data concerning a person's sex life or sexual orientation.

khe88 collects personal data through the following methods and channels:

• Direct registration: When you create a khe88 account, you provide identity and contact data directly via the registration form. This data is collected with your explicit consent at the point of registration.
• Account activity: Transaction data, betting history, and game play records are generated automatically as you use the khe88 platform. This data is associated with your account and retained in accordance with Section 9 of this Policy.
• KYC verification submissions: When you submit identity documents for verification (NID, utility bill, payment screenshot), this data is uploaded directly to the khe88 verification system via the secure account portal.
• Payment processing: When you make a deposit or request a withdrawal, your payment details are collected through the relevant payment gateway (bKash, Nagad, Rocket, Upay, bank transfer, or card processor). khe88 does not store full card numbers; only masked references are retained.
• Automated technical collection: Technical data — including IP addresses, device identifiers, browser information, and session logs — is collected automatically through the khe88 platform infrastructure and cookie technologies (see Section 7).
• Support communications: When you contact khe88 support via email at [email protected] or via live chat, the content of those communications is collected and stored as part of your support record.
• Third-party sources: khe88 may receive identity verification data from third-party KYC service providers, and fraud-risk signals from payment fraud-prevention partners, to supplement the information you provide directly.

khe88 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing of identity data, contact data, financial data, and transaction data is necessary for the performance of the contract between you and khe88 — specifically, to operate your account, process your bets and transactions, and provide you with access to khe88's services.
• Legal obligation: Processing of identity and financial data for KYC and anti-money-laundering (AML) purposes is required to comply with applicable legal obligations. khe88 is obligated to verify user identities and maintain records of financial transactions.
• Legitimate interests: Processing of technical data and usage data for fraud detection, platform security, and responsible gaming monitoring is carried out on the basis of khe88's legitimate interests in maintaining a secure, fair, and compliant platform. These interests do not override your fundamental privacy rights.
• Consent: Processing of your data for marketing communications (where applicable) is based on your explicit, opt-in consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

khe88 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

• Account creation and management: To create, verify, and maintain your khe88 user account, including processing your registration, verifying your age (21+) and identity, and managing your account settings and preferences.
• Transaction processing: To process deposits in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to process withdrawal requests; and to maintain accurate financial records of all transactions on your account.
• Responsible gaming compliance: To monitor your gambling activity for indicators of problem gambling, to enforce deposit limits and self-exclusion orders you have set, and to fulfil our obligations under our responsible gaming policy. This processing is in your direct interest as well as a legal and ethical obligation for khe88.
• Anti-money-laundering and fraud prevention: To screen transactions and account activity for patterns associated with money laundering, fraud, bonus abuse, multi-accounting, and other prohibited conduct. khe88 may share data with fraud-prevention partners and law enforcement where required by law or where khe88 reasonably suspects criminal activity.
• Customer support: To respond to your support requests, complaints, and enquiries; to investigate and resolve disputes; and to maintain records of communications for quality assurance purposes.
• Platform security: To detect and prevent unauthorised access to your account; to identify and block suspicious login attempts; and to maintain the overall security and integrity of the khe88 platform.
• Platform improvement: To analyse aggregate, anonymised usage patterns to improve the khe88 platform's features, performance, and user experience. Individual user data is not used for this purpose in an identifiable form where aggregate analysis is sufficient.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities; and to establish, exercise, or defend legal claims.
• Marketing communications (consent-based): Where you have opted in, to send you information about khe88 promotions, bonus offers, and platform updates. You may opt out of marketing communications at any time.

khe88 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your personal data is shared only in the circumstances described below, and only to the minimum extent necessary for the relevant purpose:

• Payment service providers: Financial data is shared with payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card-scheme processors (Visa, Mastercard) — solely for the purpose of processing your deposit and withdrawal transactions. These providers are bound by their own data protection and financial regulatory obligations.
• Game studio providers: Technical session data and game-play identifiers may be shared with licensed third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw Gaming, Nolimit City) to facilitate game delivery, game integrity auditing, and the resolution of game-related disputes. Personal identity data (full name, NID) is not shared with game studios.
• KYC and identity verification partners: Identity documents and verification data may be processed by third-party KYC service providers who assist khe88 in verifying user identity and age. These providers operate under strict data processing agreements with khe88.
• Fraud prevention and AML partners: Transaction data and technical data may be shared with fraud-prevention and AML screening partners to detect prohibited conduct. These partners use the data solely for risk-assessment purposes under contractual confidentiality obligations.
• Legal and regulatory disclosure: khe88 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, court order, or other binding legal process. khe88 will notify you of such disclosure to the extent permitted by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of khe88's business, personal data held by khe88 may be transferred to the successor entity, subject to equivalent data protection commitments. khe88 will notify registered users of any such transfer.

All third parties with whom khe88 shares personal data are required to implement appropriate technical and organisational security measures and to use your personal data only for the purposes for which it was shared.

khe88 uses cookies and similar tracking technologies (including local storage and session tokens) on the khe88.io platform. Cookies are small text files placed on your device by the platform when you visit. They serve the following purposes on the khe88 platform:

• Essential cookies: Required for the basic functionality of the khe88 platform, including maintaining your login session, storing your language preference, and enabling secure page navigation. These cookies cannot be disabled without impairing your ability to use the platform.
• Security cookies: Used to detect fraudulent activity, identify unusual login patterns, and protect your khe88 account from unauthorised access. These cookies are essential to platform security and cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised, aggregate data about how users interact with the khe88 platform — including which pages are visited most frequently and how users navigate between sections. This data is used solely to improve platform performance. Individual user activity is not identifiable from this aggregate data.
• Preference cookies: Used to remember settings and preferences you have chosen on the khe88 platform, such as your preferred deposit method or display settings, so that you do not need to re-enter them on each visit.

khe88 does not use third-party advertising cookies, retargeting cookies, or social media tracking pixels. Your browsing activity on khe88.io is not shared with advertising networks.

You may control cookie settings through your browser preferences. Please note that disabling essential or security cookies will significantly impair your ability to use the khe88 platform. For most browsers, cookie settings can be found under "Settings" → "Privacy" → "Cookies". Consult your browser's help documentation for specific instructions.

khe88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and khe88's servers is encrypted using 256-bit SSL/TLS protocols. The presence of the HTTPS padlock in your browser confirms this encryption is active during your session.
• Password hashing: User passwords are stored exclusively as cryptographic hashes using industry-standard hashing algorithms. khe88 staff cannot view your password in plain text — this is why we will never ask you for it.
• Access controls: Access to personal data within khe88's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of system access required for their specific role.
• Secure data storage: Personal data and financial records are stored on access-controlled servers with physical and logical security controls. Servers are located in data centres with industry-standard physical security measures.
• Intrusion detection and monitoring: khe88's platform infrastructure is monitored continuously for security incidents, unusual access patterns, and potential intrusion attempts. Suspected incidents trigger immediate investigation and response procedures.
• Staff training: All khe88 staff who handle personal data receive regular training on data protection obligations and security best practices. Data handling policies are reviewed and updated regularly.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability or suspect your account has been compromised, please contact khe88 support immediately at [email protected].

khe88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of personal data held by khe88:

After the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised, aggregate data (for example, statistical platform usage reports) may be retained indefinitely as it no longer constitutes personal data.

You may request early deletion of your personal data at any time (see Section 10). However, khe88 may be required by law to retain certain records — particularly identity and financial transaction records — for the mandatory retention periods set out above, notwithstanding a deletion request.

As a khe88 user, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address. khe88 will respond within 10 business days of receiving your request and will complete any action required within 30 days.

• Right of access: You have the right to request a copy of all personal data that khe88 holds about you. khe88 will provide this in a structured, commonly used, machine-readable format (e.g., PDF or CSV export).
• Right to rectification: If any personal data khe88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain information directly within your khe88 account settings panel.
• Right to erasure ("right to be forgotten"): You have the right to request that khe88 delete your personal data. khe88 will action such requests to the fullest extent possible. Please note that certain data — particularly identity and financial records — must be retained for the periods specified in Section 9 due to legal obligations and cannot be deleted on request.
• Right to restrict processing: You have the right to request that khe88 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: You have the right to receive personal data you have provided to khe88 in a structured, machine-readable format, and to request that this data be transmitted directly to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on khe88's legitimate interests. khe88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to withdraw consent: Where khe88 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

khe88 will not discriminate against you or restrict your access to platform services for exercising any of your data rights. If you are unsatisfied with how khe88 has handled your data rights request, you may escalate your complaint by contacting khe88's senior compliance team via [email protected].

The khe88 platform is strictly intended for adults aged 21 and above. khe88 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the khe88 registration process, and khe88 reserves the right to request supporting identity documentation at any time to confirm that a user meets the minimum age requirement.

If khe88 discovers or reasonably suspects that a registered account is held by a person under the age of 21, that account will be immediately suspended. Any deposits made to the account will be returned to the original payment method after identity verification, and no winnings will be paid. The account will then be permanently closed.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered a khe88 account, please contact us immediately at [email protected]. khe88 will investigate the matter promptly and take all necessary steps to close the account, return any funds, and delete the personal data of the minor in question in accordance with this Policy.

The khe88 platform may contain references to or integrations with third-party service providers — for example, game studio content delivered via embedded iframe technology, or payment gateways operated by bKash, Nagad, Rocket, or Upay. Where you interact with such third-party services, you will be subject to the privacy policies and data practices of those third parties.

khe88 is not responsible for the privacy practices of third-party service providers or for the content, security, or data handling of any external platform. khe88 recommends that you review the privacy policy of any third-party service before providing your personal data to that service.

The inclusion of a third-party service provider's technology within the khe88 platform does not constitute an endorsement of that provider's data protection practices. If you have concerns about how a third-party payment provider or game studio handles your data, please contact that provider directly.

khe88 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, or improvements to our platform. The effective date at the top of this Policy will be updated whenever a material change is made.

Where khe88 makes a material change to this Policy — meaning a change that significantly affects how we collect, use, or share your personal data — we will notify registered users via the email address associated with their khe88 account at least 14 days before the change takes effect. Your continued use of the khe88 platform after the notified effective date constitutes your acceptance of the updated Policy.

For minor or administrative changes (such as corrections to typos, clarifications that do not alter the substance of the Policy, or updates to contact details), khe88 may update the Policy without prior notice. We therefore recommend that you review this Policy periodically to stay informed of how khe88 protects your data.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. khe88 will retain archived versions of the Policy for a minimum of three years from the date each version is superseded.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way khe88 handles your personal data, please contact our support and compliance team using the details below. All data-related enquiries are treated with strict confidentiality and responded to within 10 business days.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: khe88 aims to respond to all privacy-related enquiries within 10 business days
• Platform: khe88.io
• Service region: Bangladesh — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

When submitting a data rights request, please include your registered username and the email address associated with your khe88 account so that we can verify your identity before processing your request. khe88 may ask for additional verification before actioning any request that could affect the security or privacy of an account.