keha88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how keha88 ("keha88", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "the Player") who access or use the keha88 website at keha88.app and all related services, games, and features (collectively, "the Platform").

By creating a keha88 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and keha88. In the event of any conflict between this Policy and those documents on a privacy-related matter, this Policy shall prevail.

keha88 reserves the right to update this Policy at any time. Material changes will be notified to registered players via a notice on the Platform or by email where a valid address is held. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

2. Personal Data We Collect

keha88 collects personal data through several channels: directly from you during registration and account activity, automatically through your use of the Platform, and in some cases from trusted third-party identity verification and payment service providers. The categories of personal data we collect include the following:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (used to verify you are 21 years of age or older)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation
• Selfie or liveness-check image where required by our verification provider
• Source-of-funds documentation when requested for enhanced due diligence

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method identifiers (e.g., bKash account number, Nagad wallet reference, Rocket number, bank account details)
• Account balance history and bonus credit records
• Chargeback and dispute records where applicable

2.4 Usage and Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end times, pages visited, and in-Platform navigation paths
• Game history including bets placed, outcomes, and game session durations
• Cookies and similar tracking identifiers (see Section 8)

2.5 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with the keha88 support team
• Feedback, complaints, and survey responses you submit voluntarily
• Promotional opt-in preferences and marketing communication history

3. How We Use Your Personal Data

keha88 processes your personal data only for clearly defined and legitimate purposes. We do not use your data in ways that are incompatible with the purposes listed below. The primary purposes for which we process personal data are as follows:

• 👤
  Account Creation and Management To create and maintain your keha88 account, authenticate your identity at login, and provide you with access to the Platform and its features.
• 🪪
  KYC and Age Verification To verify that you are aged 21 or above and to comply with our Know Your Customer obligations before processing any withdrawal requests.
• 💳
  Payment Processing To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• 🛡️
  Fraud Prevention and Security To detect and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other illegal or prohibited conduct on the Platform.
• 🎯
  Personalisation To tailor your gaming experience, including recommending games, offering relevant promotions, and customising the Platform interface based on your activity and preferences.
• 📣
  Marketing Communications To send promotional emails, SMS notifications, or in-Platform messages about keha88 offers, bonuses, and new game launches — but only where you have opted in to receive such communications.
• 🎲
  Responsible Gaming To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit or session limits in accordance with our Responsible Gaming policy.
• 📊
  Analytics and Platform Improvement To analyse aggregate usage patterns, identify technical issues, and improve the performance, security, and content of the Platform over time.
• ⚖️
  Legal Compliance To comply with applicable legal obligations, respond to lawful requests from regulatory authorities or law enforcement agencies, and to exercise or defend legal claims.

4. Legal Basis for Processing

keha88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing is required to perform our contract with you — principally, to operate your keha88 account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, anti-money-laundering requirements, and age verification.
• Legitimate interests: Processing is necessary for keha88's legitimate business interests, including fraud detection, security monitoring, and Platform analytics, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is not otherwise justified by the bases above, we will seek your explicit consent — in particular, for direct marketing communications. You may withdraw consent at any time by contacting support or using the opt-out link in any marketing message.

5. Sharing Your Personal Data

keha88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients where necessary to deliver the Platform and comply with legal obligations:

5.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include identity verification providers, payment processing partners (including operators of bKash, Nagad, and Rocket integrations), game content providers (including studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), cloud hosting and infrastructure providers, and customer support tooling vendors.

5.2 Legal and Regulatory Authorities

keha88 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when required to do so by law, court order, or other binding legal process. In such cases, we will disclose only the minimum data necessary to comply with the applicable obligation.

5.3 Business Transfers

In the event that keha88 undergoes a merger, acquisition, corporate restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

5.4 Responsible Gaming Partners

Where a player registers a self-exclusion request or where keha88 identifies signs of problem gambling that require referral to an external support organisation, limited account data may be shared with those support partners solely for the purpose of delivering responsible gaming assistance.

6. Data Retention

keha88 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Active account data — retained for the lifetime of your keha88 account plus a minimum of five (5) years following account closure, to meet our legal and regulatory obligations.
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of verification, in line with standard anti-money-laundering record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Marketing preferences and opt-in records — retained until you withdraw consent or until three (3) years of inactivity, whichever comes first.
• Support communications — retained for up to two (2) years from the date of the communication, unless the matter involves an ongoing dispute or legal proceedings.
• Technical and usage logs — retained for up to twelve (12) months on a rolling basis for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

7. Your Privacy Rights

As a keha88 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within five (5) business days.

7.1 Right of Access

You have the right to request a copy of the personal data keha88 holds about you, along with information about how and why that data is being processed.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For minor corrections (e.g., an address update), you may be able to make changes directly via your account settings.

7.3 Right to Erasure

You may request that keha88 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations — we may be required to retain certain data (e.g., KYC and transaction records) regardless of an erasure request.

7.4 Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of your personal data in a commonly used, machine-readable format (e.g., CSV or JSON) and to request that this data be transmitted directly to another service provider where technically feasible.

7.5 Right to Restrict Processing

You have the right to request that keha88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while you await the outcome of an objection to processing.

7.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, although keha88 may continue processing where it can demonstrate compelling legitimate grounds that override your interests and rights.

7.7 Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

8. Cookies and Tracking Technologies

keha88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, remember your preferences, maintain your authenticated session, and collect usage analytics. Cookies are small text files stored on your device by your browser.

8.1 Types of Cookies We Use

• Essential cookies: Required for core Platform functionality, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and notification preferences.
• Analytics cookies: Used to collect aggregate data on how players navigate the Platform, which pages are most visited, and where errors occur. This data helps us improve the Platform over time.
• Marketing cookies: Used, with your consent, to track interactions with our promotional materials and to personalise bonus and game recommendations based on your activity.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling essential cookies will impair the functionality of the keha88 Platform and may prevent you from accessing your account. For guidance on managing cookies in your browser, refer to your browser's help documentation.

9. Data Security

keha88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption on all data transmitted between your device and the keha88 servers
• Encrypted storage for sensitive data including KYC documents and payment method identifiers
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data
• Regular security audits and penetration testing of Platform infrastructure
• Two-factor authentication options available for your keha88 account login
• Audit logging of all access to sensitive data records

While keha88 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure — please ensure your keha88 password is strong and unique, and never share your login credentials with anyone. If you suspect that your account has been compromised, contact the keha88 support team immediately via live chat.

10. Children and Minors

The keha88 Platform is strictly intended for individuals who are 21 years of age or older. keha88 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, we will immediately close the associated account, delete all related personal data, and refund any real-money deposits to the originating payment method.

If you believe that a person under the age of 21 has created a keha88 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. Third-Party Services and Links

The keha88 Platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt. These providers operate their own game software and may process certain technical data (such as game session tokens) in order to deliver their content. keha88 is not responsible for the privacy practices of third-party game studios, and we recommend that you review the privacy policies of any third-party service whose content you interact with.

The keha88 Platform does not contain links to external third-party websites. Any URLs displayed within game interfaces are the sole responsibility of the respective game providers.

12. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way keha88 handles your personal data, please contact our support team using the details below. We take all privacy queries seriously and aim to respond within five (5) business days.

Privacy Enquiries:
[email protected]
Subject line: Privacy Request – [Your Username]

Live Chat: Available 24 hours a day, 7 days a week via the keha88 Platform. Live chat is the fastest way to reach our support team for urgent privacy or account-security concerns.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.