kh888 Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, address, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Platform" means the kh888 website, mobile interface, and all associated services accessible at kh888.io.
• "Player" / "You" / "User" means any individual who accesses, registers on, or uses the Platform.
• "kh888" / "We" / "Us" / "Our" means the operator of the kh888 platform and all its associated services.
• "KYC" means Know Your Customer — the identity and age verification process required before processing withdrawals.
• "Cookies" means small text files stored on your device by your web browser at the instruction of our Platform, used to remember preferences and analyse usage patterns.
• "Third-Party Service Providers" means companies or individuals engaged by kh888 to perform services on our behalf, including payment processors, game providers, fraud prevention services, and analytics platforms.

2 Data Controller

kh888 is the data controller responsible for Personal Data collected through the Platform. As data controller, kh888 determines the purposes and means by which your Personal Data is processed.

If you have any questions about how your Personal Data is handled, or if you wish to exercise any of the rights described in Section 11 of this Policy, please contact our Data Protection contact point at:

• Email: [email protected]
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

All data-related requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt.

3 Data We Collect

kh888 collects the following categories of Personal Data from players and platform visitors:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where disclosure of health-related information is voluntarily made by a player in the context of a responsible gaming self-exclusion request, in which case such data is handled with the highest level of confidentiality.

4 How We Collect Data

kh888 collects Personal Data through the following channels:

• Direct submission — data you provide when registering an account, completing KYC verification, making a deposit, submitting a withdrawal request, or contacting our support team.
• Automated technical collection — data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, via server logs and first-party analytics tools.
• Cookies and similar technologies — session cookies, persistent cookies, and similar tracking technologies as described in Section 8 of this Policy.
• Third-party identity verification providers — data returned to kh888 following KYC checks conducted through our verification partners when you submit identity documents for account verification.
• Payment processors — transaction confirmation data and payment status information returned by payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
• Fraud prevention and AML services — risk scoring and flagging data returned by third-party fraud detection providers to assist in protecting the integrity of the Platform.

5 Legal Basis for Processing

kh888 processes your Personal Data on the following legal grounds, depending on the specific purpose of processing:

• Contractual necessity — processing required to create and manage your account, process deposits and withdrawals, and deliver the services you have requested under the kh888 Terms & Conditions.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests — processing carried out for kh888's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your fundamental rights.
• Consent — processing based on your explicit and freely given consent, specifically for the sending of marketing communications by email, SMS, or in-platform notification. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

kh888 uses your Personal Data for the following specific purposes:

• Creating, maintaining, and securing your kh888 account.
• Verifying your identity and age in compliance with our 21+ age restriction policy.
• Processing deposits and withdrawals through your chosen payment method.
• Delivering customer support, resolving disputes, and responding to complaints.
• Monitoring gaming activity to identify patterns associated with problem gambling and applying responsible gaming interventions where appropriate.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities.
• Personalising your platform experience, including displaying relevant game recommendations and promotional offers.
• Sending account-related communications such as transaction confirmations, security alerts, and policy update notifications.
• Sending marketing and promotional communications to players who have provided consent.
• Conducting internal analytics to improve platform performance, game selection, and user experience.
• Complying with applicable legal obligations and cooperating with lawful requests from competent authorities.

7 Data Sharing & Third Parties

kh888 shares your Personal Data only with trusted third-party service providers who are contractually bound to use such data exclusively for the purposes for which it was disclosed, and to protect it with appropriate technical and organisational security measures. Categories of recipients include:

• Payment service providers — bKash, Nagad, Rocket, Upay, Visa and Mastercard acquiring banks, and other payment network operators, solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers — third-party verification platforms that validate identity documents and confirm age on our behalf.
• Game content providers — licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who receive limited technical data (e.g., session tokens, bet amounts) necessary to operate game sessions. These providers do not receive your full personal profile.
• Fraud prevention and AML compliance services — providers of risk scoring, transaction monitoring, and anti-money laundering screening tools.
• IT and platform infrastructure providers — hosting providers, content delivery networks, and security services who process data solely to support kh888's technical operations.
• Legal and regulatory authorities — kh888 will disclose Personal Data to law enforcement agencies, regulators, or judicial bodies where required to do so by applicable law, court order, or other lawful process.

8 Cookies & Tracking Technologies

kh888 uses cookies and similar tracking technologies on the Platform. Cookies help us deliver essential platform functionality, remember your preferences, detect fraudulent activity, and analyse aggregate usage patterns to improve the platform experience.

The types of cookies used by kh888 include:

• Strictly necessary cookies — required for core Platform functionality such as session authentication, security token validation, and load balancing. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Functional cookies — used to remember your preferences such as preferred language, selected currency denomination, and display settings, so that you do not need to re-enter these each session.
• Analytics cookies — used to collect anonymised or pseudonymised data about how players navigate and interact with the Platform. This information is used to identify usability issues, measure feature adoption, and improve overall platform quality.
• Security cookies — used to detect and prevent fraudulent login attempts, account takeover activity, and bot-driven automated requests.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For detailed cookie management instructions specific to your browser, please consult your browser's official documentation.

9 Data Retention

kh888 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data — retained for the duration of your active account relationship with kh888.
• KYC and identity verification records — retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of 5 years following the date of each transaction.
• Support communications and dispute records — retained for a minimum of 3 years following the resolution of the relevant matter.
• Marketing consent records — retained for as long as you are an active player, plus 3 years following account closure, to demonstrate compliance with consent obligations.
• Technical and usage data — typically retained in identifiable form for up to 24 months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with kh888's internal data disposal procedures.

10 Data Security

kh888 employs a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all databases storing Personal Data and financial records.
• Role-based access controls ensuring that only personnel with a verified operational need can access player data.
• Multi-factor authentication requirements for all administrative systems.
• Continuous intrusion detection and real-time security monitoring of Platform infrastructure.
• Regular independent penetration testing and vulnerability assessments by qualified third-party security specialists.
• Formal data breach response procedures, including notification obligations to affected players in the event of a breach that poses a risk to their rights and freedoms.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. kh888 cannot guarantee the absolute security of your data but is committed to implementing and maintaining industry-leading protections at all times.

You are responsible for maintaining the confidentiality of your account login credentials. If you suspect that your account has been accessed without your authorisation, please contact our support team at [email protected] immediately.

11 Your Rights

As a player whose Personal Data is processed by kh888, you have the following rights with respect to your information:

• Right of Access — you may request a copy of the Personal Data kh888 holds about you, along with information about how it is being processed.
• Right to Rectification — you may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to kh888's legal retention obligations. Note that kh888 may be required to retain certain data (e.g., KYC and financial records) for defined regulatory periods even following an erasure request.
• Right to Data Portability — you may request that kh888 provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
• Right to Restrict Processing — you may request that kh888 restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Object — you may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. kh888 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases this period may be extended by a further 30 days, in which case kh888 will notify you of the extension and the reason for it.

kh888 may request proof of identity before processing a data subject request, to ensure that Personal Data is not disclosed to or modified on behalf of an unauthorised person.

12 Children & Minors

If you believe that a person under the age of 21 has created a kh888 account or provided their Personal Data to us, please notify us immediately at [email protected] so that we may take appropriate action without delay.

13 Marketing Communications

With your explicit consent, kh888 may send you promotional communications about bonuses, new game releases, seasonal promotions, tournaments, and other platform news. These communications may be delivered by:

• Email to your registered address
• SMS to your registered mobile number
• In-platform notifications when you are logged in

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences within your kh888 account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting our support team at [email protected] with a written opt-out request.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawing marketing consent does not affect the sending of essential account communications such as transaction confirmations, security alerts, or policy update notifications — these are sent on the basis of contractual necessity, not consent.

14 International Data Transfers

kh888 operates internationally and may transfer your Personal Data to servers or service providers located outside Bangladesh in order to deliver Platform services. Where such transfers occur, kh888 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses binding the recipient to handle your data with equivalent protections to those described in this Privacy Policy.
• Limiting transfers to jurisdictions or recipients that maintain adequate data protection standards.
• Implementing technical security measures (encryption, access controls) that apply regardless of where data is processed.

By creating a kh888 account and using the Platform, you acknowledge and consent to such international transfers where necessary for the operation of the services you have requested.

15 Changes to This Policy

kh888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Where changes are material, kh888 will provide at least 7 days' advance notice via email to your registered address and/or via a prominent notice on the Platform.

The effective date and version number displayed at the top of this page will be updated each time the Policy is revised. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact [email protected] to close your account.

We encourage you to review this Privacy Policy periodically so that you remain fully informed about how your Personal Data is being handled.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by kh888, please contact us using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 5 business days; resolution within 30 calendar days

By continuing to use the kh888 Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein. 21+ Only. Please play responsibly.