Privacy Policy — How kheal88 Protects Your Data
Your privacy is important to us. This Privacy Policy explains exactly what personal information kheal88 collects from registered players in Bangladesh, how that information is used, who it may be shared with, and what rights you have over your own data.
Please Read This Policy Carefully
By creating an account on kheal88, making a deposit, or continuing to use any part of the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with how we handle your data, please discontinue use of the platform and contact support@kheal88 to request account closure.
SSL Encryption
All data transmitted between your browser and kheal88 is protected by industry-standard SSL/TLS encryption. Your personal and financial information is never sent over unencrypted channels under any circumstances.
Secure Data Storage
Player data is stored on access-controlled servers with strict internal access policies. Only authorised personnel with a verified operational need may access personal player records, and all access is logged and audited.
Your Data, Your Rights
Registered players on kheal88 have the right to access, correct, and request deletion of their personal data at any time. We are committed to responding to all data-related requests within a reasonable timeframe consistent with applicable law.
No Unauthorised Selling
kheal88 does not sell, rent, or trade your personal information to third-party marketers or data brokers. Data is shared only with verified operational partners strictly as described in this Privacy Policy.
Transparent Cookie Use
We use cookies and similar technologies solely to improve platform functionality, maintain session state, and analyse aggregate usage patterns. You can manage your cookie preferences at any time through your browser settings.
KYC & AML Compliance
Identity verification and transaction monitoring data is collected to meet Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. This protects all players on the platform from fraud and financial crime.
Section 1
Information We Collect
kheal88 collects personal information from players at various stages of the registration, verification, and gameplay process. The categories of information we collect are described below. We collect only the information that is necessary for the purposes identified in this Privacy Policy — we do not collect data excessively or speculatively.
1.1 Registration Information
When you create a player account on kheal88, we collect the following information directly from you:
- Full legal name (as it appears on your government-issued identity document)
- Date of birth (for age verification — you must be 18 years or older)
- Residential address in Bangladesh (city, district, and postal code)
- Valid email address
- Mobile phone number associated with your bKash, Nagad, Rocket, or other mobile financial service account
- Preferred currency (Bangladeshi Taka, BDT)
- Username and encrypted password
1.2 Identity Verification (KYC) Documents
Before withdrawals can be processed, we are required to verify your identity. During the KYC process we may collect:
- Scanned or photographed copies of your Bangladesh National Identity Card (NID), passport, or driver's licence
- Proof of address (utility bill, bank statement, or official government correspondence dated within the past 3 months)
- Proof of payment method (screenshot of bKash or Nagad transaction history confirming account ownership)
- Selfie photograph alongside your identity document, where required for enhanced verification
1.3 Financial Transaction Data
Each time you make a deposit or withdrawal on kheal88, we record:
- Transaction amount in Bangladeshi Taka (BDT)
- Payment method used (bKash, Nagad, Rocket, Upay, bank name)
- Mobile wallet number or bank account details (masked) associated with the transaction
- Transaction timestamps and reference numbers
- Bonus credits applied to or withdrawn from your account
1.4 Gameplay & Betting Activity
We maintain detailed records of your activity on the platform, including:
- Games played, wager amounts, outcomes, and session durations
- Sports betting markets accessed, odds accepted, and bet settlement results
- Bonus offers claimed, wagering progress, and promotion participation history
- Responsible gaming tool usage (deposit limits set, cooling-off periods requested, self-exclusion history)
1.5 Technical & Device Data
When you access kheal88 through a browser or mobile device, we automatically collect certain technical information:
- IP address (used for geolocation, fraud detection, and session security)
- Device type, operating system, and browser version
- Referring URL (the page you visited immediately before arriving at kheal88, if applicable)
- Pages visited on kheal88, click paths, and time spent on each page
- Session identifiers and authentication tokens
1.6 Communications Data
If you contact our customer support team via email or live chat, we retain records of those communications, including the content of your messages, the date and time of contact, and the resolution outcome. This data is used to improve support quality and to maintain a full history of any disputes or account investigations.
Section 2
How We Use Your Data
kheal88 processes your personal data for clearly defined, legitimate purposes. We do not use your data for any purpose incompatible with those described below. The primary purposes for which we process personal data are:
| Processing Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Creating and managing your player account | Registration information, device data | Contractual necessity |
| Processing deposits and withdrawals in BDT | Financial transaction data, KYC documents | Contractual necessity |
| Age verification and identity checks (18+) | KYC documents, registration information | Legal obligation |
| Anti-money laundering (AML) monitoring | Financial transaction data, KYC documents | Legal obligation |
| Fraud detection and platform security | Device data, IP address, gameplay activity | Legitimate interests |
| Responsible gaming monitoring and interventions | Gameplay data, communication data | Legal obligation / Legitimate interests |
| Sending transactional emails (deposit confirmations, withdrawal updates) | Email address, transaction data | Contractual necessity |
| Sending promotional communications (bonuses, seasonal offers) | Email address, gameplay preferences | Consent (opt-in) |
| Improving platform performance and game offerings | Aggregated, anonymised gameplay and technical data | Legitimate interests |
| Resolving disputes and support queries | Communication data, account history | Contractual necessity / Legitimate interests |
Marketing Communications — Opt-Out Available
If you have opted in to receive marketing communications from kheal88 (including promotional emails about bonuses, seasonal offers such as Eid and Pohela Boishakh promotions, BPL cricket betting offers, and new game launches), you may withdraw your consent at any time by contacting support@kheal88 or by clicking the unsubscribe link in any marketing email. Opting out of marketing communications will not affect transactional communications related to your account.
Section 3
Data Sharing & Third Parties
kheal88 does not sell or rent your personal information to any third party. We share data only with carefully selected partners and only to the extent strictly necessary to deliver our services, comply with legal obligations, or protect the platform and its players from fraud. All third-party recipients of player data are contractually bound to handle that data securely and solely for the specified purpose.
3.1 Payment Processing Partners
To process your deposits and withdrawals in Bangladeshi Taka, kheal88 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners receive only the minimum information required to execute and verify the specific transaction — they do not receive your full account history, gameplay records, or KYC documents beyond what is required for payment compliance.
3.2 Game Studio Providers
The games available on kheal88 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own game servers and may process certain technical session data (such as your player session token and wager amounts) in order to deliver the game and record outcomes. They do not receive your full personal profile, payment details, or KYC documents.
3.3 Identity Verification Services
For KYC verification, we may use third-party identity verification platforms that process your submitted documents against official databases to confirm authenticity. These providers are bound by strict data processing agreements and are prohibited from retaining your identity documents beyond the verification process.
3.4 Legal and Regulatory Disclosure
kheal88 may disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction when required to do so by law, court order, or in response to a lawful request. We will always seek to notify affected players of such disclosures where legally permissible.
3.5 Business Transfers
In the event that kheal88 undergoes a merger, acquisition, or sale of all or a substantial portion of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via email prior to any such transfer and ensure that the acquiring entity commits to treating player data in accordance with a privacy policy no less protective than this one.
No Cross-Border Data Transfers Without Safeguards
Where any of our third-party partners process personal data outside of Bangladesh, we ensure that appropriate contractual safeguards are in place to maintain the same level of data protection that applies within Bangladesh. We do not transfer player data to jurisdictions without adequate data protection standards without first establishing appropriate contractual protections.
Section 4
Cookies & Tracking Technologies
kheal88 uses cookies and similar browser-based tracking technologies to provide a functional, personalised, and secure platform experience. This section explains what cookies we use, why we use them, and how you can manage your preferences.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your session state, language preferences, and login status — so that the platform functions correctly across page loads and return visits. Cookies do not contain executable code and cannot access other files on your device.
4.2 Categories of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, login state, CSRF protection, security tokens | Session / 24 hours | No — essential for platform function |
| Functional | Remembering your game preferences, deposit method, and display settings | 30 days | Yes — affects personalisation |
| Analytics | Aggregate, anonymised usage data to improve platform performance and game selection | 90 days | Yes — no effect on core functionality |
| Security | Fraud detection, IP reputation scoring, device fingerprinting for login anomaly detection | Session / 7 days | No — required for account security |
4.3 Managing Cookie Preferences
You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies on a per-site or global basis. Please note that disabling strictly necessary or security cookies may prevent you from logging in to your kheal88 account or using certain platform features. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
4.4 Third-Party Analytics
kheal88 uses aggregated, anonymised analytics data to understand how players navigate the platform and to identify areas for improvement. This data does not identify individual players and is not shared with external advertising networks or data brokers. We do not use cross-site tracking or behavioural advertising cookies.
Section 5
Data Security & Storage
kheal88 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following measures form the core of our data security framework:
- Transport Layer Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. This applies to every page on kheal88, including account login, deposit flows, and KYC document uploads.
- Password Hashing: Player passwords are stored as salted cryptographic hashes using industry-standard algorithms. We never store passwords in plain text and they cannot be recovered by our staff — only reset through a verified identity flow.
- Access Controls: Personal data is stored on servers with role-based access controls. Staff members may only access the specific categories of data necessary for their authorised operational function. All access is logged and subject to periodic audit.
- Data Segregation: Sensitive KYC documents are stored separately from gameplay and transaction records, with additional access restrictions applied to identity document stores.
- Intrusion Detection: Our platform infrastructure is monitored continuously for anomalous access patterns, potential intrusion attempts, and security events. Automated alerting systems notify our security team of any suspicious activity in real time.
- Penetration Testing: kheal88 undergoes periodic security assessments to identify and address potential vulnerabilities in platform infrastructure and application code before they can be exploited.
Security Breach Notification
In the unlikely event of a data security incident that affects your personal information, kheal88 will notify affected players via the email address registered on their account as promptly as possible. The notification will describe the nature of the incident, the categories of data involved, the steps we have taken to contain the breach, and the recommended actions for affected players. Notifications will be issued within 72 hours of us becoming aware of the incident where technically feasible.
While kheal88 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure: use a strong, unique password for your kheal88 account, never share your login credentials with anyone, and contact support@kheal88 immediately if you notice any suspicious activity on your account.
Section 6
Your Data Rights
As a registered player on kheal88, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support@kheal88 with a clear description of your request. We will acknowledge your request within 3 business days (Bangladesh Standard Time, BST UTC+6) and aim to fulfil all requests within 30 calendar days.
6.1 Right of Access
You have the right to request a copy of the personal data kheal88 holds about you. Upon a verified request, we will provide a summary of your registered information, transaction history, KYC status, gameplay summary, and communication history in a structured, readable format.
6.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity information (name, date of birth, NID number), we will require supporting documentation to verify the correction before updating our records.
6.3 Right to Erasure
You may request the deletion of your personal data from kheal88's systems. Please note that this right is subject to legal limitations — we are required to retain certain transaction records and KYC documentation for a minimum period as specified in Section 7 of this Policy in order to comply with financial regulation and anti-money laundering obligations. Data that is subject to mandatory retention cannot be deleted prior to the end of the applicable retention period, but will be securely deleted thereafter.
6.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and the basis for objection is being assessed. During a processing restriction, we will continue to store your data but will not process it for any purpose other than storage.
6.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format. This allows you to transfer your data to another service provider if you choose.
6.6 Right to Withdraw Consent
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing that is based on other lawful grounds such as contractual necessity or legal obligation.
How to Submit a Data Rights Request
Send your request to support@kheal88 with the subject line "Data Rights Request — [Your Registered Username]". Include your full name, registered email address, and a clear description of the right you wish to exercise. We may request additional identity verification before processing your request to ensure we do not disclose data to an unauthorised party. Our support team is available 24/7 on BST (UTC+6).
Section 7
Data Retention Policy
kheal88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes. The following table summarises our standard retention periods by data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration information | Duration of account + 5 years post-closure | Legal obligation, dispute resolution |
| KYC identity documents | Duration of account + 5 years post-closure | AML compliance, regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial regulation, tax record requirements |
| Gameplay and betting records | 3 years from session date | Responsible gaming monitoring, dispute resolution |
| Customer support communications | 3 years from last interaction | Service quality, dispute resolution |
| Security and device logs | 12 months from log date | Fraud detection, security investigation |
| Marketing preferences | Until consent withdrawn + 1 year | Proof of consent, compliance audit |
| Self-exclusion records | Minimum 6 years from exclusion date | Responsible gaming obligations, legal compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to an individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and service improvement purposes.
Where you request account closure, we will initiate the deletion process for non-mandatory data categories within 30 days of account closure confirmation. Data subject to mandatory retention periods will be held securely in restricted storage and deleted at the end of the applicable retention period.
Section 8
Policy Updates & Contact
Right to Update This Policy: kheal88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or applicable regulation. Material changes — those that meaningfully affect how we collect, use, or share your personal data — will be communicated to registered players via email to the address on their account at least 7 days before the changes take effect.
Minor Updates: For non-material changes such as clarifications, typographical corrections, or reformatting, we may update the Policy without individual notification. The effective date at the top of this page will always reflect the date of the most recent revision. We encourage all players to review this Policy periodically to stay informed about how kheal88 protects their data.
Continued Use: Your continued use of kheal88 following notification of a material change to this Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you should cease using the platform and contact our support team to arrange account closure and any applicable withdrawal of funds.
Children's Privacy: kheal88 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a person under 18, we will delete that data immediately and close the associated account. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.
Contact Our Privacy Team: If you have any questions, concerns, or requests relating to this Privacy Policy or the way kheal88 handles your personal data, please contact our dedicated support team:
- Email: support@kheal88 (plain text — not a clickable link)
- Subject line: "Privacy Enquiry — [Your Registered Username]"
- Response time: Within 3 business days (BST, UTC+6)
- Support hours: 24 hours a day, 7 days a week on Bangladesh Standard Time
Questions About Your Privacy?
Our support team is available around the clock on BST. You can also explore our FAQ for quick answers, review our Responsible Gaming tools, or head back to the games.