Your Privacy at khlla88

When you use the khlla88 platform — whether you are browsing as a guest, registering a new account, depositing funds, placing a bet, or contacting our support team — we collect certain categories of personal and technical information. This section sets out precisely what data we gather and through what means.

1.1 Information You Provide Directly

During account registration and throughout your use of the Platform, you actively provide us with information including:

• Identity data: Full legal name, date of birth, gender, and nationality as provided on your government-issued ID.
• Contact data: Email address, mobile phone number, and residential address (including district, city, and division within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: Username and hashed password. We never store passwords in plain text.
• KYC documentation: Copies of your National Identity Card (NID), passport, or other government-issued photo ID submitted during verification; proof of address documents; and proof of payment method where required.
• Payment data: Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), account identifiers, and transaction references. We do not store full card numbers — only masked versions and tokens provided by payment processors.
• Support communications: The content of any messages, emails, or live chat transcripts you send to our support team.

1.2 Information Collected Automatically

When you access khlla88 via any device — mobile phone, tablet, or desktop computer — our systems automatically collect:

• Device data: IP address, device type, operating system version, browser type and version, screen resolution, and device language setting.
• Usage data: Pages visited, time spent on each page, clickstream data, search queries entered within the Platform, games played, bet amounts and frequencies, and session start and end times in Bangladesh Standard Time (BST, UTC+6).
• Location data: Approximate geographic location derived from your IP address. We do not access your device's GPS location unless you explicitly grant permission in a mobile browser.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 4 of this Policy.

1.3 Data from Third Parties

We may also receive information about you from third-party sources, including identity verification services used for KYC checks, fraud prevention databases, payment processors (such as bKash and Nagad) confirming transaction status, and game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Microgaming) transmitting gameplay and RNG result data for game integrity purposes. Information received from third parties is treated with the same level of care as data you provide directly.

khlla88 processes your personal data only for specific, legitimate purposes directly related to the operation and improvement of the Platform. We do not use your data for any purpose that is incompatible with those stated below.

Where we rely on your consent as the legal basis for processing (for example, sending promotional emails about Eid bonuses, BPL season offers, or T20 World Cup promotions), you may withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

khlla88 treats your personal data with strict confidentiality. We do not sell, rent, or license your personal data to any third party for their own commercial or marketing use. However, we do share certain data with carefully selected third parties where necessary to operate the Platform and fulfil our legal obligations. All third parties with whom we share data are contractually required to handle that data securely and only for the purpose for which it was disclosed.

Categories of Third Parties We May Share Data With

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — solely for the purpose of processing deposits and withdrawals in Bangladeshi Taka.
• Identity verification providers: Third-party KYC and age-verification services used to confirm that players meet the 18+ age requirement and pass anti-money-laundering checks.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed content studios — who receive gameplay data necessary for game operation, RNG integrity, and dispute resolution.
• IT and infrastructure providers: Cloud hosting, server infrastructure, and cybersecurity service providers engaged to maintain the security and availability of the Platform.
• Analytics providers: Aggregate, anonymised usage analytics providers used to improve Platform performance. No personally identifiable information is shared in this context.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or regulatory bodies where we are required by applicable law to disclose information, including in response to a valid legal order or to report suspected money laundering or fraud.

khlla88 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform efficiently, remember your session and preferences, detect fraud, and improve user experience. This section explains what cookies we use, what they do, and how you can manage them.

Types of Cookies We Use

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge, and the browsers built into Android and iOS devices popular in Bangladesh) allow you to view, block, or delete cookies via the browser's settings or privacy menu. Please note that disabling essential cookies will prevent you from logging in to your khlla88 account and will impair core Platform functionality.

For detailed guidance on managing cookies in your specific browser, refer to the browser's official help documentation. Clearing cookies does not delete any data stored on our servers — it only removes the local copy stored on your device.

khlla88 implements a multi-layered security framework to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Our security posture reflects the sensitivity of the data we hold and the trust our players place in us.

Technical Safeguards

• 256-bit SSL/TLS encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS 1.3 protocol.
• Data at rest encryption: Sensitive fields in our databases — including personal identity information and payment tokens — are encrypted at rest using AES-256.
• Password hashing: Account passwords are stored as salted cryptographic hashes. We never store or transmit passwords in plain text.
• Firewall and intrusion detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that alert our security team to anomalous activity.
• Two-factor authentication (2FA): Optional 2FA via OTP to your registered mobile number adds an additional layer of account security. We strongly recommend enabling this feature.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific job functions.
• All khlla88 staff with access to personal data undergo regular training on data protection obligations and information security best practices.
• Third-party vendors with access to Platform data are subject to contractual data processing agreements that mandate security standards equivalent to our own.
• We conduct regular internal security reviews and penetration tests to identify and address vulnerabilities before they can be exploited.

khlla88 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. If you request erasure of your data and no legal retention obligation prevents us from complying, we will action the deletion within 30 calendar days of receipt of your verified request.

As a khlla88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond in English within the timeframes indicated.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 calendar days of your verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will update your data within 7 days.
• Right to Erasure ("Right to Be Forgotten"): Subject to legal retention obligations, you may request deletion of your personal data after account closure. We will confirm erasure in writing within 30 days.
• Right to Restrict Processing: You may ask us to suspend our use of your data (other than storage) in certain circumstances, for example while a correction request is pending.
• Right to Data Portability: You may request a machine-readable copy (CSV or JSON format) of personal data you have provided to us, so that you can transmit it elsewhere if you choose.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

khlla88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, operational requirements, applicable laws, or regulatory guidance. When we make material changes, we will update the effective date shown at the top of this document and, where appropriate, notify registered players by email or via a notice on the Platform homepage.

We encourage you to review this Privacy Policy periodically. For active players, the most recent version of this Policy applies to all personal data we hold about you, regardless of when it was collected. If you continue to use khlla88 after a revised Policy has been published, your continued use constitutes acceptance of the updated terms.

If any future amendment significantly reduces your privacy protections or introduces a new purpose for which we wish to use your existing data, we will seek fresh consent from affected players before the change takes effect, wherever this is required by applicable law.