Privacy Policy
How khaa88 Protects Your Data
At khaa88, your privacy matters as much as your gameplay. This Privacy Policy explains precisely what personal information we collect, how we use it, who we may share it with, and the rights you hold over your own data as a member of Bangladesh's trusted online casino platform.
SSL Encryption
All data transmitted between your device and the khaa88 platform is protected by industry-standard SSL encryption. Your personal details, payment information, and account credentials are secured at every point of transit across our systems.
No Data Selling
khaa88 does not sell, rent, or commercially trade your personal information to any third party. Your data is used solely for the purposes of delivering and improving our platform services, fulfilling regulatory obligations, and providing relevant communications.
Your Data, Your Rights
As a khaa88 member, you hold a defined set of rights over your personal data — including the right to access, correct, restrict, and in certain circumstances erase the information we hold about you. Contact our support team to exercise any of these rights.
Section 1
Information We Collect
khaa88 collects personal information from you in the course of your registration, account management, use of the platform, and interactions with our customer support team. The categories of personal data we collect are described below. We collect only the information that is necessary for the purposes outlined in this Privacy Policy, and we do not request or store data beyond what is reasonably required to operate and improve the khaa88 platform.
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport or driving licence number, photograph (where submitted for KYC) | Account registration and identity verification |
| Contact Data | Email address, mobile phone number, residential address (street, city, postal code), division (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh) | Account registration and profile updates |
| Financial Data | Payment method details (bKash number, Nagad number, Rocket number, Upay number, bank account reference, card type), transaction history, deposit and withdrawal amounts in BDT | Deposit, withdrawal, and payment processing |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, login timestamps | Automatic collection during platform use |
| Usage Data | Pages visited, games played, betting history, search queries within the platform, bonus activity, session frequency and duration | Automatic collection during platform use |
| Communications Data | Records of live chat conversations, support ticket content, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, time-out periods, problem gambling risk indicators | Use of responsible gaming tools |
Children's Data: khaa88 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data belonging to a minor has been collected, we will delete it promptly and close the associated account. If you believe a minor has registered on our platform, please contact [email protected] immediately.
Section 2
How We Use Your Data
khaa88 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely upon are: the performance of our contract with you as a registered member; compliance with legal and regulatory obligations; our legitimate interests in operating a secure, fraud-free platform; and, in limited circumstances, your explicit consent. Below we set out the specific purposes for which we use your data and the corresponding lawful basis for each.
- Account Creation and Management: We use your identity and contact data to create and maintain your khaa88 member account, verify your identity, process your login, and respond to any account-related requests you submit. Lawful basis: contract performance.
- Payment Processing: Your financial data is used to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, internet banking, or card), to detect and prevent payment fraud, and to maintain accurate financial records. Lawful basis: contract performance and legal obligation.
- Identity Verification and KYC: We process identity and contact data to conduct Know Your Customer (KYC) checks, age verification, and source-of-funds assessments as required by our anti-money laundering obligations. Lawful basis: legal obligation.
- Fraud Prevention and Platform Security: Technical and usage data are analysed to detect suspicious activity, prevent unauthorised access, identify potential fraud, and enforce our Terms and Conditions. Lawful basis: legitimate interests.
- Responsible Gaming Monitoring: We monitor usage and responsible gaming data to identify patterns that may indicate problem gambling behaviour, to apply self-exclusion restrictions, and to enforce deposit limits and time-out periods requested by members. Lawful basis: legal obligation and legitimate interests.
- Platform Improvement: Aggregated and anonymised usage data help us understand how members interact with the khaa88 platform, which games and features are most popular, and where the user experience can be improved. Lawful basis: legitimate interests.
- Marketing Communications: Where you have given your consent, we may use your contact data to send promotional emails, SMS messages, or in-platform notifications about new games, bonuses, BPL promotions, seasonal offers, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team. Lawful basis: consent.
- Legal Compliance and Reporting: We may process and retain personal data to comply with applicable legal obligations, to respond to lawful requests from regulatory bodies or law enforcement authorities, and to enforce our legal rights. Lawful basis: legal obligation.
Automated Decision-Making: khaa88 uses automated systems to assess fraud risk, verify age, and monitor for problem gambling indicators. Where an automated decision has a significant effect on your account (such as a suspension), you have the right to request human review of that decision. Contact our support team to make such a request.
Section 3
Data Sharing & Disclosure
khaa88 does not sell your personal data to third parties. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the relevant purpose. All third parties with whom we share data are required to handle your information in a manner consistent with this Privacy Policy and applicable data protection standards.
- Payment Service Providers: To process your deposits and withdrawals, we share necessary financial and identity data with the relevant payment providers — including bKash, Nagad, Rocket, Upay, partnered Bangladeshi banks, Visa, and Mastercard. These providers act as independent data controllers subject to their own privacy policies and financial regulatory requirements.
- Identity Verification Partners: We may share identity data with third-party KYC and age verification service providers who assist us in fulfilling our know-your-customer obligations. These providers process data solely on our instruction for verification purposes.
- Game Software Providers: To deliver our casino and sportsbook services, we work with licensed game studios and technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session identifiers and device type) necessary to deliver their games to your device.
- Fraud and Security Services: We share technical and usage data with specialist fraud detection and cybersecurity service providers who help us protect the platform and its members from fraudulent activity, account takeover, and money laundering.
- Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request, khaa88 may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units. We will notify affected members where we are legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of khaa88, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent platform notice prior to any such transfer and will ensure the receiving entity maintains the same standard of data protection.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to service providers located outside Bangladesh, khaa88 ensures that appropriate safeguards are in place — such as contractual data protection clauses or the provider's participation in recognised data protection frameworks — to maintain an equivalent level of protection for your data.
Section 4
Cookies & Tracking Technologies
The khaa88 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your web browser when you visit our platform. Cookies allow the platform to remember your preferences, maintain your login session, and collect analytics data that helps us understand and improve the site.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember basket/bet slip contents, enable secure authenticated areas of the platform, prevent cross-site request forgery | Session / up to 24 hours |
| Functional | Remember your language preference, display settings, and any responsible gaming limits you have set so they persist across sessions | Up to 12 months |
| Analytics | Collect aggregated, anonymised data on page views, session duration, game popularity, and navigation paths to help us improve the platform experience | Up to 24 months |
| Fraud Detection | Identify and flag unusual access patterns, bot activity, multiple account indicators, and other security risks across sessions and devices | Up to 12 months |
You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your khaa88 account and using core platform features. Disabling functional or analytics cookies will not affect your ability to log in and play, but may reduce the quality of your personalised experience. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
In addition to cookies, the khaa88 platform may use web beacons (small transparent image pixels) in email communications to confirm that an email has been opened and to track link clicks within promotional messages. You can prevent web beacon tracking in emails by disabling image loading in your email client settings, or by withdrawing your marketing consent entirely.
Section 5
Data Security & Retention
khaa88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to, the following safeguards currently in place across our platform and internal systems.
Encryption in Transit & at Rest
All data transmitted between your browser and the khaa88 servers is encrypted using TLS (Transport Layer Security). Sensitive data fields stored in our databases — including identity document references and payment method identifiers — are encrypted at rest using AES-256 standard encryption.
Access Controls
Access to personal data within the khaa88 organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job functions. All internal access to member data is logged and subject to periodic audit review.
Continuous Monitoring
Our security infrastructure includes continuous automated monitoring for intrusion attempts, anomalous access patterns, and data exfiltration indicators. Our security team operates around the clock, with incidents escalated immediately upon detection to minimise any potential impact on member data.
Incident Response
In the event of a confirmed personal data breach, khaa88 has documented incident response procedures requiring us to assess the breach, contain it, notify affected members without undue delay where the breach poses a risk to their rights, and take appropriate remedial action to prevent recurrence.
With respect to data retention, khaa88 retains your personal data for as long as your account remains active and for a defined period after account closure, as required by our financial record-keeping and anti-money laundering obligations. Specifically: identity and financial records are retained for a minimum of five years following account closure; communications data is retained for two years; and anonymised usage and analytics data may be retained indefinitely for statistical and platform improvement purposes. When personal data is no longer required for the purposes for which it was collected and retention obligations have been fulfilled, we securely delete or irreversibly anonymise it.
Your Account Security Responsibility: While khaa88 implements robust server-side security measures, the security of your khaa88 account also depends on the strength of your password and the security practices you follow on your own device. Always use a strong, unique password, log out of your account when using a shared device, and report any suspected unauthorised access to our support team immediately at [email protected].
Section 6
Your Privacy Rights
As a khaa88 member and a data subject, you hold a number of rights in relation to the personal data we hold about you. khaa88 is committed to honouring these rights and to responding to any valid request within a reasonable timeframe — typically within 30 days of receipt. To exercise any of the rights described below, please contact our support team via live chat or by email at [email protected]. We may need to verify your identity before processing your request.
Right of Access
You have the right to request a copy of the personal data khaa88 holds about you, along with information about how it is used and who it has been shared with. This is sometimes called a Subject Access Request (SAR).
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details (such as contact information) directly through your account settings.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data — for example, where it is no longer necessary for the purpose for which it was collected. Note that this right is subject to our legal retention obligations, which may require us to retain certain data even after account closure.
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
Right to Portability
Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another service provider.
Right to Object
You have the right to object to the processing of your personal data where we rely on legitimate interests as the lawful basis. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.
khaa88 will not charge a fee for exercising any of the rights described above unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline the request. We will always explain our reasoning if we are unable to fulfill a data rights request in full.
Section 7
Third-Party Services
The khaa88 platform integrates with a number of third-party services to deliver its full range of casino and sports betting features. These include game software providers, payment processors, and analytics or security services. While khaa88 exercises care in selecting reputable and compliant third-party partners, we wish to be transparent about the nature of these relationships and their potential data protection implications for our members.
Game content on the khaa88 platform is delivered via embedded software from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your session data and relevant game-play information are processed by the respective provider's systems to deliver the game to your device and to record the outcome of your game session for settlement purposes. These providers operate under their own privacy policies and are subject to independent regulatory oversight from the jurisdictions in which they are licensed. khaa88 has data processing agreements in place with each provider to govern the handling of any member data they receive.
Payment processing for bKash, Nagad, Rocket, and Upay transactions is handled directly through those providers' respective systems. When you initiate a deposit or withdrawal using a mobile financial service, your transaction details are processed by the relevant provider in accordance with their own privacy policies and their obligations under Bangladeshi financial regulations. khaa88 receives confirmation of transaction status and amount but does not store your full mobile banking credentials or PINs.
Third-Party Privacy Policies: khaa88 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any payment provider, game studio, or other third-party service you interact with through or in connection with the khaa88 platform. If you have concerns about how a specific third-party provider handles your data, please contact that provider directly or reach out to our support team for guidance.
Section 8
Policy Updates & Contact
khaa88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. When material changes are made to this Policy, we will notify registered members by email to the address associated with their account or by posting a prominent notice on the khaa88 platform. The effective date shown at the top of this Policy indicates when the most recent version came into force.
We encourage you to review this Privacy Policy from time to time to stay informed about how we handle your personal data. Your continued use of the khaa88 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.
If you have any questions, concerns, or complaints about this Privacy Policy or the way in which khaa88 handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond within a reasonable timeframe. Where a complaint cannot be resolved to your satisfaction, you may have the right to escalate the matter to the relevant data protection authority or regulatory body applicable in your jurisdiction.
Contact Our Privacy Team:
Email: [email protected]
Live Chat: Available 24/7 on khaa88.net
Response Time: Within 48 hours for privacy-related enquiries
Business Hours: Bangladesh Standard Time (UTC+6)
Your Privacy, Our Priority
Have Questions About Your Data?
Our support team is available around the clock to address any privacy concerns. You can also explore our FAQ page for quick answers, or visit our Responsible Gaming page to manage your account preferences safely.
18+ only. Gambling involves financial risk. Play responsibly. This Privacy Policy applies to all khaa88 members.