Privacy Policy — How kahl88 Collects, Uses, and Protects Your Data

When you register for a kahl88 account, use our platform, or interact with our support team, we collect personal data that falls into the following categories:

Identity and Contact Information:

• Full legal name as it appears on your government-issued identification
• Date of birth (for mandatory age verification — kahl88 is strictly 18+)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar)
• Mobile phone number registered in Bangladesh
• Email address used for account correspondence
• National ID number or passport number where submitted for KYC verification

Financial and Payment Information:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers linked to your account
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Visa or Mastercard details (card number truncated, expiry date, billing postcode) where applicable
• Transaction history including deposits, withdrawals, and bonus redemptions — all denominated in Bangladeshi Taka (৳ / BDT)

Technical and Usage Data:

• IP address and approximate geographic location at the time of login and session activity
• Device type, operating system version, and browser type
• Session logs including pages visited, games played, bet amounts placed, and session duration
• Cookies and similar tracking identifiers (see Section 4 for full details)

Communications Data:

• Records of any email correspondence between you and the kahl88 support team
• Live chat transcripts (where live chat is used)
• Any documents you submit in response to a KYC or verification request

kahl88 processes your personal data only for specified, legitimate purposes. The following table summarises the primary purposes for which we use your data and the legal basis under which each processing activity is conducted:

kahl88 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human review. Where profiling is used (for example, to detect unusual betting patterns for responsible gaming purposes), the outcomes are reviewed by trained staff before any account-level action is taken.

kahl88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. However, to provide our services effectively and meet our legal obligations, we may share certain categories of your data with the following categories of recipients:

• Payment Service Providers: We share the minimum necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard for the sole purpose of processing your deposit and withdrawal transactions. These providers are bound by their own strict data protection obligations.
• Game Technology Providers: Game studios and platform providers — including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and Ezugi — receive session-level technical data necessary to deliver their games within the kahl88 interface. These providers do not receive your full identity or financial data.
• KYC and Identity Verification Partners: Where we use a third-party identity verification service to conduct KYC checks, your identity documents and personal details are transmitted securely to that provider solely for the purpose of verification. These providers are contractually prohibited from using your data for any other purpose.
• Fraud Prevention and Security Services: Technical and behavioural data may be shared with specialist fraud detection services to identify and prevent fraudulent activity, account takeovers, and money laundering on the platform.
• Legal and Regulatory Authorities: kahl88 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or regulatory demand. In such cases, we disclose only the specific data requested and only to the extent legally required.
• Professional Advisers: Our legal counsel, auditors, and accountants may have access to personal data in the course of providing professional services to kahl88. All such advisers are bound by confidentiality obligations.

kahl88 uses cookies, web beacons, pixel tags, and similar tracking technologies on the kahl88.net website to enhance your experience, measure platform performance, and ensure secure operation. The following categories of cookies are in use:

Strictly necessary cookies are deployed without consent as they are essential to the secure and functional operation of the kahl88 platform. Functional, performance, and responsible gaming cookies are activated when you agree to our cookie notice on your first visit. You may withdraw consent for non-essential cookies at any time by updating your browser settings to block or delete cookies. Please note that disabling cookies may impair certain platform features including saved login sessions and personalised game recommendations.

kahl88 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following retention schedules apply:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping best practices.
• KYC Documents: Identity documents submitted for verification are retained for five (5) years following account closure or the date of the last regulated transaction, whichever is later.
• Support Communications: Email and chat correspondence with the kahl88 support team is retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and Usage Logs: Server logs, session logs, and device data are retained for a maximum of thirteen (13) months, after which they are automatically deleted or anonymised.
• Marketing Preferences: Records of your consent to or opt-out from marketing communications are retained for the duration of your account and for two (2) years thereafter as evidence of your marketing preference.
• Self-Exclusion Records: Where a player has requested self-exclusion, a record of that exclusion status is retained for the full duration of the exclusion period plus five (5) years, to prevent accidental re-activation of excluded accounts.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from kahl88's systems or, where deletion is not technically feasible, rendered fully anonymous so that it can no longer be associated with any identifiable individual.

kahl88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and the kahl88 platform is encrypted using 256-bit SSL/TLS protocols. Our servers hold valid SSL certificates which are renewed proactively before expiry.
• Encryption at Rest: Sensitive personal data including identity documents, payment information, and account credentials stored on kahl88 infrastructure is encrypted at rest using industry-standard symmetric encryption.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the specific data categories required for their role. All privileged access is logged and audited.
• Two-Factor Authentication: Administrative access to kahl88's back-end systems requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication on their own accounts for added security.
• Penetration Testing and Vulnerability Management: kahl88 conducts regular security assessments of its platform infrastructure. Identified vulnerabilities are prioritised and remediated according to a documented security patching process.
• Incident Response: kahl88 maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in a risk to the rights of affected individuals, kahl88 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
• Staff Training: All kahl88 staff who handle personal data undergo regular data protection and security awareness training. Confidentiality obligations are embedded in all employment and contractor agreements.

As a kahl88 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" along with your registered account details for identity verification purposes.

• Right of Access: You have the right to request a copy of the personal data kahl88 holds about you. We will provide this information within a reasonable timeframe following identity verification. Where a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details such as your registered mobile number or email address can also be updated via the account settings section of the platform.
• Right to Erasure: In certain circumstances, you have the right to request that kahl88 delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (such as anti-money laundering record-keeping requirements) even after your account is closed.
• Right to Restriction: You may request that we restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data while we carry out a verification check.
• Right to Object: Where we process your data on the basis of legitimate interest (including for profiling or responsible gaming monitoring), you have the right to object to that processing. We will assess your objection and suspend the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where your data has been provided by you and is processed on the basis of consent or contractual necessity, you may request a copy of that data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where our processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kahl88's handling of your personal data, please contact our dedicated support team using the details below. All privacy-related enquiries are handled by staff trained in data protection obligations.

Privacy Contact:
Email: [email protected]
Subject line: "Privacy Policy Query" or "Data Rights Request"
Support hours: 24/7 · Bangladesh Standard Time (BST, UTC+6)

kahl88 reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in our data processing activities, applicable law, or best practice standards. When material changes are made, we will update the "Last Reviewed" date displayed at the top of this document and, where the changes significantly affect your rights, provide a direct notification to your registered email address.

Continued use of the kahl88 platform following notification of any Privacy Policy update will be taken as your acknowledgement and acceptance of the revised terms. If you do not agree with any material change, you should cease using the platform and request account closure by contacting [email protected].