kh99 Privacy
Policy

1 Introduction

kh99 is an online betting and casino entertainment platform serving players in the Bangladesh market. We provide sports betting (including cricket, football, and kabaddi), live casino games, slot titles, and specialty games — all accessible in Bangladeshi Taka (BDT) via payment methods including bKash, Nagad, Rocket, and Upay. The platform is operated at kh99.io and is intended exclusively for players aged 21 and above.

As part of providing these services, kh99 necessarily processes personal data relating to registered players. We take our data protection responsibilities seriously and are committed to being transparent about what data we hold, why we hold it, and how it is protected. This Policy applies to all personal data collected through the kh99 website, mobile-optimised interface, live chat support, and any other channel through which you interact with kh99.

This Policy is incorporated by reference into kh99's Terms & Conditions. Defined terms used in this Policy but not defined herein have the meanings given to them in the Terms & Conditions available at kh99.io/terms-conditions.

2 Personal Data We Collect

kh99 collects personal data through several means: information you provide directly during registration and account use, information generated automatically through your use of the platform, and information received from third-party verification and payment partners. The categories of personal data we collect include:

Category	Examples	Collected When
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet)	Registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet number, Visa/Mastercard last four digits, bank account details	Deposits, withdrawals, payment verification
Transaction Data	Deposit history, withdrawal history, bet history, game play history, bonus redemptions	Ongoing platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps, login history	Automatically on each session
Usage Data	Pages viewed, games played, bet frequency, session duration, feature interactions	Automatically during platform use
Communications Data	Live chat transcripts, support email correspondence, complaint records	When you contact kh99 support
Verification Documents	Copies of National ID card, passport, proof of payment method ownership	KYC/AML identity verification

kh99 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where a government-issued ID document incidentally contains such information as part of the mandatory identity verification process.

3 How We Use Your Personal Data

kh99 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your kh99 player account, including password recovery and account security alerts.
• Service Delivery: To process your bets, settle winnings, credit deposits, process withdrawal requests, and provide access to all games and features on the platform.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with applicable anti-money-laundering and responsible gaming obligations. kh99 works with third-party verification partners to complete this process.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfer channels.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. Technical and transaction data is used in automated risk-scoring systems and manual review processes.
• Responsible Gaming: To monitor player activity for signs of problem gambling and to deliver and enforce responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) that you request.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email.
• Legal Compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the kh99 platform, fix bugs, and develop new features. Individual player data used for this purpose is anonymised where possible.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates by email or SMS. You may withdraw consent at any time.

4 Legal Basis for Processing

kh99 processes personal data under one or more of the following legal bases depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between kh99 and the player (e.g., processing bets, managing accounts, processing deposits and withdrawals).
• Legal Obligation: Processing required to comply with applicable legal or regulatory obligations (e.g., identity verification for anti-money-laundering compliance, responding to lawful authority requests).
• Legitimate Interests: Processing for kh99's legitimate business interests where those interests are not overridden by your privacy rights (e.g., fraud prevention, platform security, internal analytics to improve services).
• Consent: Processing based on your freely given, specific, and informed consent (e.g., sending marketing emails or SMS messages). You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies & Tracking Technologies

kh99 uses cookies and similar tracking technologies on the kh99.io platform to enable core functionality, remember your session, and collect anonymous usage statistics. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences (such as language and display settings) so that you do not have to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymous data about how players navigate the kh99 platform — such as pages visited and time spent — to help us understand usage patterns and improve the user experience. This data is aggregated and does not identify individual players.
• Security Cookies: Used to support fraud detection and platform security by helping kh99 identify unusual access patterns or suspicious session behaviour.

kh99 does not use advertising or cross-site tracking cookies. We do not allow third-party advertising networks to place cookies on the kh99 platform.

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent the kh99 platform from functioning correctly and may prevent you from logging in to your account.

6 Third-Party Sharing & Disclosure

kh99 shares personal data with third parties only in the circumstances described below. We do not sell personal data to any third party for their own commercial or marketing purposes under any circumstances.

• Payment Processors: Your financial data (mobile wallet number, card details) is shared with payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to process your deposits and withdrawals. These partners process your data as independent data controllers under their own privacy policies.
• Identity Verification Providers: KYC and document verification partners receive your identity data and verification documents to complete the mandatory identity verification process. All such partners are contractually bound to process data only for the purposes specified by kh99.
• Game Providers: Game suppliers — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — receive your player ID and session token to enable game play. They do not receive your full identity or payment data.
• Technology & Infrastructure Partners: Hosting, CDN, and security providers may process technical data as part of delivering the kh99 platform infrastructure. These providers act as data processors under contracts that require them to process data only on kh99's documented instructions.
• Legal & Regulatory Authorities: kh99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. kh99 will, where permitted by law, notify affected players of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kh99's business, personal data may be transferred to the acquiring entity. Affected players will be notified prior to any such transfer taking effect.

7 Data Security

kh99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and kh99's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon displayed in your browser confirms that your connection to kh99.io is encrypted.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms (bcrypt). Passwords are never stored in plain text and cannot be retrieved — only reset.
• Access Controls: Access to personal data within kh99's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked when no longer required.
• Intrusion Detection: kh99's infrastructure is monitored continuously for signs of unauthorised access, abnormal data patterns, and security threats. Automated alerts are triggered for suspicious activity.
• Regular Security Reviews: kh99 conducts periodic internal security reviews and works with external security partners to assess and strengthen the platform's security posture.

While kh99 takes data security seriously and maintains robust protections, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, kh99 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

You are responsible for maintaining the confidentiality of your own kh99 account credentials. Do not share your password with anyone. kh99 will never ask you to reveal your password via live chat, email, or any other channel.

8 Data Retention

kh99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The general retention schedule applied by kh99 is as follows:

Data Category	Retention Period	Basis
Account & Identity Data	Duration of account + 5 years post-closure	AML/legal obligation
Transaction & Betting Records	5 years from date of transaction	AML/legal obligation
KYC Verification Documents	5 years post-account closure	AML/legal obligation
Support Communications	3 years from last interaction	Legitimate interests / legal
Technical & Log Data	12 months on a rolling basis	Security / fraud prevention
Marketing Consent Records	Until consent is withdrawn + 3 years	Legal obligation (proof of consent)

When the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

9 Your Privacy Rights

As a kh99 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the kh99 support team at [email protected] with the subject line "Privacy Request — [Right Type]". We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data kh99 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data kh99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that kh99 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to kh99's legal retention obligations — data that must be retained under anti-money-laundering or other legal requirements cannot be erased until the applicable retention period expires.
• Right to Restriction of Processing: You may request that kh99 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on kh99's legitimate interests. kh99 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 Children & Minors

The kh99 platform is strictly intended for adults aged 21 years and above. kh99 does not knowingly collect or process personal data relating to individuals under the age of 21. If you are under 21, you must not register an account or use any part of the kh99 platform.

If kh99 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the account will be permanently closed, and any deposits made will be returned to the originating payment source. Any winnings accrued during the period of underage use will be forfeited.

11 Marketing Communications

kh99 will only send you promotional and marketing communications — including information about bonuses, seasonal offers (BPL season, Eid promotions, Pohela Boishakh offers, IPL special markets), and new game launches — where you have provided explicit prior consent to receive such communications.

You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by kh99
• Contacting kh99 support via live chat and requesting removal from marketing communications
• Emailing [email protected] with the subject line "Marketing Opt-Out"

Withdrawal of marketing consent will not affect the delivery of essential service communications such as deposit confirmation messages, withdrawal notifications, security alerts, account verification requests, or any other transactional communication required for the operation of your kh99 account.

kh99 does not share your contact details with third-party marketers for their own promotional purposes.

12 Changes to This Privacy Policy

kh99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will publish the updated Policy on this page with a revised "Last Updated" date and, where practicable, notify registered players via their registered email address.

Your continued use of the kh99 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and request account closure via [email protected]. We encourage you to review this Policy periodically to stay informed about how kh99 handles your personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kh99 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Request — [Right Type]" (e.g., "Privacy Request — Access" or "Privacy Request — Erasure")
• Live Chat: Available 24/7 via the kh99 platform, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy rights requests are acknowledged within 5 business days and resolved within 30 calendar days of receipt.