kahl88 Privacy Policy

1 How We Collect Your Data

kahl88 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, including via cookies, server logs, and session tracking technologies.
• Third-party sources: Identity verification data received from KYC service providers, fraud prevention agencies, and payment processors where you have authorised such sharing.

2 Legal Basis for Processing

kahl88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have requested.
• Legitimate interests: Processing necessary to prevent fraud, ensure platform security, manage responsible gaming obligations, and improve our services — where those interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with anti-money laundering (AML) rules, age verification requirements, and any applicable regulatory obligations.
• Consent: Processing for optional purposes such as direct marketing communications, where you have given explicit, informed consent that may be withdrawn at any time.

3 How We Use Your Data

kahl88 uses the personal data we hold about you for the following specific purposes:

• Creating, maintaining, and securing your kahl88 account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment channels.
• Verifying your identity and age in accordance with our KYC obligations.
• Detecting and preventing fraud, money laundering, and other prohibited conduct.
• Providing responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion features.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional communications where you have opted in to receive them.
• Analysing platform usage to improve game performance, payment flows, and overall user experience.
• Responding to customer support enquiries submitted via the Platform.

4 Cookies and Tracking Technologies

kahl88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise returning users, maintain session state, and collect anonymised analytics data. The types of cookies we use include:

• Essential cookies: Required for the Platform to function correctly, including session management and security tokens. These cannot be disabled without affecting your ability to use the Platform.
• Analytics cookies: Used to understand how users navigate the Platform so we can identify areas for improvement. Data collected is aggregated and anonymised.
• Preference cookies: Store your Platform preferences such as language and display settings between sessions.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies may limit your access to certain Platform features.

5 Sharing Your Data with Third Parties

kahl88 does not sell your personal data. We may share your data with carefully selected third-party service providers solely to facilitate the operation of the Platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — for processing deposits and withdrawals.
• KYC and identity verification providers: To verify your identity and age as required by our responsible gaming and anti-fraud obligations.
• Game providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive anonymised session data for game performance and fairness auditing purposes.
• Customer support platform providers: Who process support communications on our behalf under strict data processing agreements.
• Security and fraud prevention services: Who assist in monitoring for suspicious activity and protecting Platform integrity.

All third-party providers are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards. kahl88 does not permit its service providers to use your personal data for their own independent purposes.

6 International Data Transfers

kahl88 operates internationally and some of our third-party service providers may process data in countries outside Bangladesh. Where data is transferred internationally, kahl88 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain a standard of protection equivalent to that described in this Policy. By using the Platform, you consent to such transfers where necessary for the delivery of our services.

7 Data Retention

kahl88 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. In practice, this means:

• Account and identity data is retained for the lifetime of your account and for a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Customer support communications are retained for a minimum of two years from the date of last contact.
• Marketing preference records are retained until you withdraw your consent, after which they are deleted within 30 days.

Once the applicable retention period has expired, personal data is securely and permanently deleted or irreversibly anonymised.

8 Security Measures

kahl88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and kahl88 servers.
• Encryption at rest for sensitive personal and financial data stored in our databases.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Continuous security monitoring, intrusion detection systems, and regular vulnerability assessments.
• Two-factor authentication options available to all registered players.
• Regular staff training on data protection obligations and security best practices.

While kahl88 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account password and for notifying kahl88 immediately if you suspect any unauthorised access to your account.

9 Children and Minors

The kahl88 Platform is strictly for adults aged 21 and above. kahl88 does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, we will immediately suspend that account, void any associated transactions, and delete the personal data in question. If you believe a minor has accessed the Platform, please contact us immediately at [email protected].

10 Changes to This Policy

kahl88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is always displayed at the top of this page. Your continued use of the Platform following notification of any change constitutes your acceptance of the updated Policy.

11 Contact and Data Requests

If you wish to exercise any of your data rights, have a question about how kahl88 handles your personal data, or wish to raise a privacy concern, please contact our support team. We will acknowledge all requests promptly and aim to resolve them within 30 days.

Contact: [email protected]