Privacy Policy — How kh99 Protects Your Data
At kh99, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains exactly what personal information we collect from players in Bangladesh, why we collect it, how it is used and stored, who it may be shared with, and what rights you have over your own data. Please read this document in full before using the kh99 platform.
Six Pillars of the kh99 Privacy Framework
Before diving into the full legal text, here is a plain-English summary of how kh99 approaches data privacy. These principles apply across every aspect of how we collect and handle information provided by players in Bangladesh and elsewhere.
Minimal Data Collection
kh99 collects only the personal information that is strictly necessary to operate your account, process your transactions, verify your identity, and comply with platform integrity obligations. We do not collect data we have no use for.
No Sale of Personal Data
kh99 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you, and we treat it accordingly. Third-party access is limited to what is necessary for platform operations.
SSL Encryption
All data transmitted between your device and the kh99 platform is protected using industry-standard SSL/TLS encryption. Payment data processed via bKash, Nagad, Rocket, and other providers is handled entirely within those providers' own secure environments.
Player Control
You have the right to access, correct, and request deletion of the personal data kh99 holds about you. You may exercise these rights at any time by contacting our support team. Requests are processed within 30 days in most cases.
Defined Retention Periods
kh99 does not retain personal data indefinitely. We apply defined retention schedules to each category of data we hold. When data is no longer needed for the purpose it was collected, it is securely deleted or anonymised in accordance with our data retention policy.
Transparent Communication
If kh99 ever changes the way it processes your personal data in a material way, we will notify you by updating this Privacy Policy and, where appropriate, sending a notification to your registered email address. We do not make silent changes to data practices.
Information We Collect
kh99 collects personal information from players at various stages of their interaction with the platform. The categories of information we collect, and the circumstances under which we collect them, are set out below.
Registration Information
When you create a kh99 account, we collect your full legal name, date of birth, residential address in Bangladesh (including district, division, and postcode), a valid email address, and a mobile phone number linked to your preferred payment method (bKash, Nagad, Rocket, or Upay). This information is required to create and maintain your account and to communicate with you about your account activity.
Identity Verification (KYC) Information
As part of our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or other photographic identification. We may also collect proof of address documents and, where required by our compliance procedures, a photograph or video for facial verification purposes. KYC documents are handled with a heightened level of care and access is restricted to authorised compliance personnel only.
Financial Information
kh99 collects records of your deposit and withdrawal transactions including the payment method used, transaction amounts in Bangladeshi Taka (BDT), transaction reference numbers, and timestamps. We do not store full payment credentials such as full bank account numbers or complete mobile banking PINs. Payment processing is handled by the respective payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank) within their own secure environments.
Gameplay and Betting Data
We collect a full log of your gaming activity on kh99, including games played, bet amounts, outcomes, session durations, and bonus utilisation. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.
Technical and Device Information
When you access the kh99 platform, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for platform security, fraud detection, and aggregate analytics.
Communications Data
If you contact kh99 support via live chat, email, or any other supported channel, we retain a record of that communication including the content of messages exchanged, the date and time of contact, and the resolution outcome. This data is used for support quality assurance, training, and dispute resolution.
Data You Choose to Provide
Some information — such as optional profile preferences or voluntary survey responses — is provided at your discretion. Providing such optional data is not a condition of using the kh99 platform, and choosing not to provide it will not affect your ability to play or withdraw funds.
Summary of Data Categories
| Data Category | Examples | Collection Point |
|---|---|---|
| Registration Data | Name, email, mobile number, date of birth, address | Account signup |
| KYC / Identity Data | NID copy, passport, proof of address, facial verification | KYC verification process |
| Financial Data | Transaction records, payment method type, BDT amounts | Deposit and withdrawal activity |
| Gameplay Data | Bets placed, games played, session length, winnings | Active gaming sessions |
| Technical Data | IP address, device type, browser, OS | Platform access (automatic) |
| Communications Data | Support chat logs, email correspondence | Customer support interactions |
How We Use Your Data
kh99 uses the personal information it collects for the following specific purposes. We do not use personal data for purposes that are incompatible with those listed below, and we do not engage in automated decision-making that produces legal or similarly significant effects without human review.
- Account creation and management: To register your account, verify your identity, maintain your account preferences, and communicate account-related notices to you.
- Transaction processing: To process deposits and withdrawals in BDT via your chosen payment method, maintain transaction records, and resolve payment disputes.
- Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct as defined in the kh99 Terms & Conditions.
- KYC and compliance: To fulfil our platform integrity obligations by verifying the age and identity of players, ensuring the one-account-per-player rule is upheld, and supporting internal compliance reviews.
- Responsible gaming monitoring: To monitor gameplay patterns that may indicate problem gambling behaviour, to apply deposit limits, loss limits, and session time limits set by the player, and to enforce self-exclusion requests in accordance with the kh99 Responsible Gaming Policy.
- Customer support: To respond to enquiries, investigate complaints, resolve disputes, and improve the quality of our support service.
- Platform analytics and improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and feature development. kh99 does not use identifiable personal data for this purpose.
- Promotional communications: To send you information about kh99 promotions, bonuses, and seasonal offers (such as Eid and Pohela Boishakh specials, BPL cricket season offers, or T20 World Cup promotions) where you have consented to receive such communications or where kh99 has a legitimate interest in doing so. You may opt out of promotional communications at any time via your account settings or by contacting support.
- Legal obligations: To comply with any applicable legal obligations, respond to lawful requests from competent authorities, and cooperate with investigations where required by law.
No Profiling for Third-Party Marketing
kh99 does not build player profiles for the purpose of selling to, or sharing with, third-party advertisers or marketing agencies. Your personal data is used solely for the operational, security, compliance, and support purposes described above.
Legal Basis for Processing
kh99 processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:
- Contractual necessity: Processing that is necessary to perform our contractual obligations to you as a registered player — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is conducted on the basis of kh99's legitimate interests in operating a safe and fair gaming platform, provided those interests are not overridden by your rights and freedoms.
- Legal obligation: Processing that is required by law — including KYC verification, record-keeping for financial compliance, and cooperation with lawful authority requests — is carried out on the basis of legal obligation.
- Consent: Where kh99 sends you optional promotional communications or uses non-essential cookies and tracking technologies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
If you have questions about the specific legal basis applied to any particular processing activity, you may contact the kh99 support team via live chat or by email at [email protected], and we will provide a clear written explanation within a reasonable timeframe.
Data Sharing and Third Parties
kh99 does not sell or trade personal data. We share your information only with the categories of third party listed below, and only to the extent necessary for the specified purpose.
Payment Service Providers
To process deposits and withdrawals, kh99 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (BRAC Bank, City Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank). These providers operate under their own privacy policies and are contractually required to handle your data securely and only for the purpose of processing the relevant transaction.
Game Content Providers
Live dealer games and RNG games on the kh99 platform are supplied by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive gameplay session data (such as bet identifiers and round outcomes) for the purpose of game delivery, fairness certification, and technical dispute resolution. They do not receive your full registration or financial profile.
Identity Verification Services
kh99 may engage specialist third-party identity verification providers to assist with KYC processing, particularly for document authentication and facial comparison checks. Such providers are bound by strict data processing agreements and are prohibited from using your identity data for any purpose other than the verification service they are contracted to perform.
Platform Infrastructure Providers
kh99 uses cloud hosting, content delivery, and cybersecurity service providers to operate and protect the platform. These providers may process certain technical data (such as server logs and IP addresses) in the course of providing their services. They act as data processors under kh99's instruction and are not permitted to use that data for their own purposes.
Competent Authorities
kh99 will disclose personal data to competent authorities — including law enforcement agencies, financial intelligence units, and court or regulatory bodies — where required to do so by a lawful order, court directive, or applicable law. kh99 will not voluntarily disclose personal data to any authority beyond what is legally required.
No Advertising Networks
kh99 does not share personal data with advertising networks, data brokers, social media platforms, or any other third party for the purpose of targeting you with advertisements on other websites or applications. Your kh99 data stays within the operational ecosystem described above.
Data Retention
kh99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable compliance obligations. The retention periods applied to each category of data are outlined below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | Platform integrity and compliance obligations |
| KYC / Identity Documents | Duration of account + 5 years after closure | Anti-money laundering record-keeping requirements |
| Financial Transaction Records | 7 years from transaction date | Financial compliance and dispute resolution |
| Gameplay Logs | 3 years from session date | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance, dispute evidence |
| Technical / Server Logs | 90 days | Security monitoring and incident investigation |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for communications |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — from which it is not reasonably possible to identify you — may be retained indefinitely for aggregate analytical purposes without restriction.
If you request the closure of your kh99 account, your data will not be deleted immediately upon closure. The retention periods above continue to apply from the date of account closure, as required by our compliance obligations. You will not be contacted with promotional material during the post-closure retention period.
Your Rights Over Your Data
As a kh99 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact kh99 support via live chat or by email at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.
- Right of Access: You have the right to request a copy of the personal data kh99 holds about you, together with information about how it is being used. We will provide this information in a clear, structured format.
- Right to Rectification: If any personal data kh99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain registration details directly through your account settings panel.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is subject to our legal obligations to retain certain data for compliance purposes, as outlined in the Data Retention section above.
- Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you have the right to request that kh99 restrict its processing of your data while the matter is resolved.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. kh99 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on consent (such as receipt of promotional communications or use of analytical cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Identity Verification for Data Requests
To protect your privacy, kh99 will verify your identity before fulfilling any data rights request. We may ask you to confirm certain account details or provide a copy of your registered identification document before processing the request. This step is in place to prevent unauthorised parties from accessing or deleting your data.
Data Security Measures
kh99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to the following.
Encryption in Transit and at Rest
All data transmitted between your device and the kh99 platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Sensitive data stored on kh99 systems — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
Access Controls
Access to personal data within kh99's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role. Access rights are reviewed regularly, and all access to sensitive data is logged for audit purposes.
Fraud Detection Systems
kh99 operates real-time fraud detection systems that monitor account activity, login events, and transaction patterns for indicators of account compromise, unauthorised access, or prohibited conduct. Suspicious activity triggers automated alerts and, where appropriate, temporary account holds pending review by our security team.
Incident Response
In the event of a data security incident that poses a risk to your personal data, kh99 will take prompt steps to contain the incident, assess its scope, and notify affected players as soon as practicable. If you suspect that your kh99 account has been compromised, contact our support team immediately via live chat so that an emergency account lock can be applied without delay.
Staff Training
All kh99 staff members with access to personal data receive regular training on data protection obligations, secure data handling practices, and the procedures to follow in the event of a suspected security incident. Compliance with these procedures is a condition of employment and is monitored on an ongoing basis.
Phishing Warning
kh99 will never ask for your password, PIN, or full payment credentials via email, live chat, or any other channel. If you receive a message purporting to be from kh99 that requests such information, treat it as a phishing attempt and contact our support team immediately to report it.
Contact and Data Enquiries
If you have any questions, concerns, or complaints about how kh99 handles your personal data — or if you wish to exercise any of the data rights described in Section 7 — please contact us using the details below.
Support Team
kh99's customer support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays, in Bangladesh Standard Time (BST, UTC+6). You can reach us via live chat on the platform or by email at [email protected]. Our target response time for data privacy enquiries is within 2 business hours for live chat and within 24 hours for email enquiries.
Privacy Complaints
If you are unsatisfied with kh99's response to a data privacy concern, you have the right to escalate the matter. kh99 encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concern promptly and fairly. We take all privacy complaints seriously and will investigate each one thoroughly.
Updates to This Privacy Policy
kh99 reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes that affect the categories of data we collect or the third parties we share data with — we will update the effective date at the top of this page and, where practicable, notify registered players via their registered email address. Continued use of the kh99 platform after the updated Privacy Policy is published constitutes acceptance of the revised terms.
The current version of this Privacy Policy is effective as of 1 January 2026. All previous versions are superseded by this document.
Related Policies
This Privacy Policy should be read alongside the kh99 Terms & Conditions and Responsible Gaming Policy, both of which are available on the kh99 website. Together, these documents form the complete framework governing your use of the kh99 platform and our obligations to you as a player.
Your Privacy is Protected. Now Explore kh99.
Now that you understand how kh99 handles your data, dive into the platform — explore cricket betting, slots, roulette, and live casino games, all in a secure BDT environment built for Bangladeshi players.