Privacy Policy of khall88

khall88 is committed to protecting the privacy and personal data of all players who access our Platform. This Privacy Policy sets out the lawful basis on which we collect personal data, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you as a data subject. This policy applies to all data collected through the khall88 website, mobile interface, customer support channels, and any associated Platform services.

For the purposes of this Privacy Policy, "personal data" refers to any information that identifies, or could reasonably be used to identify, a specific individual, whether directly (such as your full name or mobile number) or indirectly (such as a device identifier or account username combined with other data). "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.

khall88 collects personal data through several channels: directly from you when you register an account or contact support, automatically when you interact with the Platform, and from third-party sources such as payment processors and identity verification services. The categories of data we collect are set out below.

Registration and Account Data:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you meet the 18+ age requirement)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and others)
• Email address and Bangladesh mobile number
• Username and encrypted password (passwords are never stored in plain text)
• National Identity Card (NID) number or passport number, collected during KYC verification

Financial and Transaction Data:

• Mobile banking account references associated with bKash, Nagad, Rocket, and Upay transactions (account numbers, not PINs or passwords)
• Bank account details where bank transfer methods are used (Dutch-Bangla Bank, City Bank, BRAC Bank, and others)
• Deposit amounts, withdrawal requests, transaction timestamps, and transaction reference IDs
• Wallet balance history and bonus credit/debit records

Gameplay and Behavioural Data:

• Game session logs including games played, wager amounts, win/loss outcomes, and session duration
• Sports betting selections, stake amounts, and bet settlement records
• Bonus usage, wagering progress, and promotional interaction history
• Responsible gaming tool activations (deposit limits, time-out requests, self-exclusion elections)

Technical and Device Data:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session identifiers, cookie identifiers, and similar technical tokens
• Pages visited, features used, and navigation patterns within the Platform

Communications Data:

• Records of customer support interactions via live chat, email, or ticket system
• Responses to surveys, feedback forms, or promotional opt-in confirmations

khall88 processes personal data only where there is a lawful basis for doing so. The principal bases on which we rely are: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with applicable laws and regulations; (c) legitimate interests — processing that serves khall88's reasonable operational interests without overriding your fundamental rights; and (d) consent — where you have given express permission for a specific processing activity (most commonly, marketing communications).

The specific purposes for which your data is processed are as follows:

• Account Management: Creating and maintaining your player account, authenticating your identity at login, and enabling access to all Platform features including deposits, withdrawals, gameplay, and account settings.
• Age and Identity Verification: Confirming that you are at least 18 years of age and that your identity matches the details provided at registration, in compliance with our responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), reconciling transactions, and investigating payment disputes.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, multi-accounting, money laundering, identity theft, and other prohibited conduct described in our Terms and Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, administering self-exclusion and deposit limit tools, and fulfilling our duty of care obligations towards players.
• Customer Support: Responding to your enquiries, resolving account disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's design, game offerings, payment options, and overall user experience.
• Marketing Communications: Sending promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or seasonal offers — but only where you have provided consent or where we have a legitimate interest basis. You may opt out of marketing communications at any time.
• Legal and Regulatory Compliance: Fulfilling record-keeping, reporting, and cooperation obligations required by applicable law, including anti-money laundering (AML) and counter-financing of terrorism (CFT) requirements.

khall88 does not sell, rent, or trade your personal data to third parties for their own commercial use. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: We share transaction data with our payment processing partners — including the gateway operators supporting bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank integrations — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to handle your data securely.
• Identity Verification Services: For KYC compliance, we may share identity document data (NID, passport) with accredited third-party identity verification providers. These services process your documents for the sole purpose of confirming your identity and are prohibited from retaining or using your data for any other purpose.
• Game Providers: When you access games supplied by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical data — including your session token, player ID, and stake amounts — is transmitted to that provider to facilitate gameplay. Game providers are not provided with your full personal profile and may not use gameplay data for purposes other than delivering and improving the specific game service.
• Fraud and Security Partners: We may share technical data (IP addresses, device fingerprints, transaction patterns) with fraud detection and cybersecurity service providers engaged to protect the Platform and its players from malicious activity.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority, khall88 may disclose personal data without prior notice to you. We will, where legally permissible, notify you of any such disclosure request.
• Business Transfers: In the event that khall88 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. Players will be notified via a Platform notice prior to any such transfer taking effect, and the acquiring entity will be required to honour this Privacy Policy.

All third parties with whom khall88 shares personal data are required, through contractual arrangements, to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was shared. khall88 does not authorise any third party to use your personal data for their own independent marketing or commercial purposes.

khall88 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform effectively, remember your preferences, and understand how players interact with our services. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other information stored on your device.

You may control cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling essential cookies will prevent you from logging in to your khall88 Account. For guidance on managing cookies in your browser, refer to the help documentation provided by your browser's developer. khall88 does not use third-party advertising cookies or behavioural profiling cookies that track your activity across other websites.

khall88 retains personal data for the minimum period necessary to fulfil the purposes outlined in this Privacy Policy, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention schedule applies:

• Active Account Data: Retained for the full duration of the account relationship and for a period of 5 years following permanent account closure, in accordance with standard financial record-keeping practices applicable to online gaming platforms.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for 5 years from the date of the last transaction or from the date of account closure, whichever is later. Document data is stored in encrypted form and access is restricted to authorised compliance personnel only.
• Customer Support Records: Retained for 2 years from the date of the last support interaction, to allow for follow-up and dispute resolution.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus 1 year following withdrawal of consent, as evidence of the original consent given.
• Technical and Log Data: Typically retained for 90 days for security monitoring purposes. Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

Personal data is stored on servers located in secure data centre facilities. Data in transit between your device and our servers is protected by 256-bit TLS/SSL encryption. Access to personal data is restricted on a strict need-to-know basis, and all staff with access to player data are subject to confidentiality obligations. Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

As a player on khall88, you hold a number of rights in relation to the personal data we hold about you. khall88 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please submit a written request to support@khall88 from your registered email address, clearly describing the right you wish to exercise and providing sufficient information to allow us to identify your Account.

• Right to Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used, where it is stored, and with whom it has been shared. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data held by khall88 is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account details (such as your email address or mobile number) directly through your Account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data — commonly known as the "right to be forgotten". This right applies where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that this right is subject to overriding legal retention obligations; we cannot delete data we are legally required to retain (such as financial transaction records).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

khall88 will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

Protecting the personal data of our players is a core operational priority at khall88. We implement a layered security architecture that combines technical controls, organisational measures, and staff training to guard against unauthorised access, accidental loss, disclosure, alteration, or destruction of personal data.

Key security measures currently in place include:

• Transport Layer Encryption: All data transmitted between your browser or mobile device and the khall88 Platform is encrypted using 256-bit TLS/SSL. This applies to account login, deposit and withdrawal flows, personal data updates, and all API communications with game providers and payment gateways.
• Password Security: User passwords are stored using a one-way cryptographic hashing algorithm with salting. khall88 never stores passwords in plain text and cannot retrieve or read your password. If you forget your password, a secure reset flow is used rather than recovery of the original value.
• Access Controls: Access to systems holding personal data is restricted to authorised personnel on a least-privilege basis. Administrative access requires multi-factor authentication and is logged for audit purposes.
• Intrusion Detection and Monitoring: The Platform's infrastructure is monitored 24 hours a day, 7 days a week by automated security systems and a dedicated security operations function. Anomalous access patterns, brute-force attempts, and other security events trigger immediate alerts and investigation protocols.
• Payment Data Isolation: No payment credentials (bKash PINs, Nagad passwords, bank account passwords) are ever transmitted to or stored by khall88. Payment flows are handled entirely within the secure environment of the respective payment provider. khall88 receives only a transaction reference and status confirmation.
• Incident Response: In the event of a personal data breach that poses a risk to affected players, khall88 will take immediate containment action and notify affected players via their registered email address within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the data affected, and the steps taken to mitigate harm.

While khall88 takes all reasonable technical and organisational precautions to protect your data, no internet transmission or electronic storage system is completely immune to risk. Players are advised to use strong, unique passwords for their khall88 Account and to keep their login credentials strictly confidential. If you suspect that your Account has been compromised, contact support@khall88 immediately.

khall88 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, the introduction of new Platform features, changes in applicable law, or in response to guidance from data protection authorities. When material changes are made to this policy, a notice will be displayed on the Platform homepage and, where practicable, communicated to active players via their registered email address. The updated policy will take effect on the effective date stated at the top of the document.

The most current version of this Privacy Policy is always available at https://khall88.com/privacy-policy. Players are encouraged to review this page periodically. Continued use of the Platform following the effective date of any updated version constitutes acceptance of the revised policy. If a player does not agree to the revised policy, they should discontinue use of the Platform and may request account closure in accordance with the process described in our Terms and Conditions.

This Privacy Policy was last reviewed and updated on 1 January 2026. The policy applies to all players who access or use khall88 from Bangladesh or any other location where the Platform is accessible.

For guidance on responsible gaming, including self-exclusion options and support resources, please visit our Responsible Gaming page. For general questions about your account or the Platform, our full FAQ is available at the FAQ page.