keha88 Privacy Policy

Information We Collect

keha88 collects personal information in several ways: directly from you when you register an account or complete identity verification, automatically when you use the platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of personal data we collect are described in full below.

keha88 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, the account will be immediately closed, all personal data will be deleted in accordance with our retention policy, and any deposited funds will be returned to the original payment source. 18+

How We Use Your Data

keha88 processes personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which your data is used are set out below, together with the legal basis for processing under applicable data protection principles.

• Account creation and management: Your identity and contact data are used to create and maintain your keha88 account, verify your identity, reset your password, and communicate important account information to you. Legal basis: contractual necessity.
• Processing deposits and withdrawals: Financial data including your bKash, Nagad, Rocket, or Upay mobile wallet number is used to process transactions accurately and reconcile your keha88 account balance. Legal basis: contractual necessity.
• Identity verification (KYC): Government-issued identity documents are processed to verify that you are who you say you are, that you are aged 18 or over, and that you are not subject to any applicable sanctions or restrictions. Legal basis: legal obligation and legitimate interest.
• Fraud prevention and security: Technical data including IP addresses, device fingerprints, and login patterns are analysed to detect and prevent fraudulent account activity, multi-accounting, money laundering, and unauthorised access. Legal basis: legitimate interest and legal obligation.
• Responsible gaming compliance: Account activity data, betting history, and responsible gaming tool settings are used to monitor for signs of problem gambling and to enforce self-exclusion or deposit limit requests made by the player. Legal basis: legal obligation and player welfare.
• Platform improvement: Aggregated and anonymised technical and usage data is analysed to improve platform performance, identify bugs, optimise the user experience, and develop new features. Legal basis: legitimate interest.
• Marketing communications: Where you have given explicit consent to receive promotional communications, keha88 may use your email address or mobile number to send you information about bonuses, seasonal promotions (e.g., Eid, BPL season, T20 World Cup), and new product launches. You may withdraw consent at any time by contacting [email protected]. Legal basis: consent.
• Legal and regulatory compliance: keha88 may process and disclose your personal data where required to comply with a legal obligation, respond to a lawful request from a competent authority, or protect the rights and safety of keha88, its players, or the public. Legal basis: legal obligation.

Cookies & Tracking Technologies

keha88 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, remember your preferences, maintain your login session, and understand how players interact with the site. This section explains each category of cookie we use and how you can manage your cookie preferences.

keha88 does not use third-party advertising cookies or behavioural tracking cookies that profile you across websites external to keha88.net. All analytics data collected on keha88.net is processed exclusively for internal platform improvement purposes and is not shared with advertising networks.

Data Sharing & Third Parties

keha88 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the specific purpose for which it is shared. All third parties with whom keha88 shares personal data are contractually bound to protect that data and to process it only in accordance with keha88's instructions.

• Payment processors: When you deposit or withdraw using bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a bank transfer, keha88 transmits the minimum necessary financial data to the relevant payment processor to complete your transaction. Payment processors operate under their own privacy policies and security standards.
• Identity verification providers: keha88 may use a third-party KYC and identity verification service to cross-reference your National ID (NID) or passport details against authoritative databases. Identity data transmitted for KYC purposes is not retained by the verification provider beyond the period required to complete the check.
• Game content providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your anonymised session token and bet amounts to facilitate game play and record round outcomes. These providers do not receive your full name, mobile number, or payment details.
• Infrastructure and hosting providers: keha88's platform is hosted on secure cloud infrastructure. Our hosting provider processes server logs and technical data as part of normal infrastructure operation. This data is processed under a strict data processing agreement and is not used by the hosting provider for any purpose other than infrastructure management.
• Fraud and AML screening services: keha88 uses specialist third-party fraud detection and anti-money laundering (AML) screening tools. These services may process your IP address, device fingerprint, and transaction patterns to identify high-risk activity. Data shared for AML purposes is subject to legal confidentiality requirements.
• Legal and regulatory disclosure: keha88 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, by a valid court order, or where keha88 believes in good faith that disclosure is necessary to prevent fraud, protect the safety of a person, or fulfil a legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of keha88's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer by email and will be given the opportunity to request deletion of your data prior to the transfer taking effect.

Data Retention & Storage

keha88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following retention schedule applies to the principal categories of personal data we hold.

After the applicable retention period has expired, keha88 will securely delete or anonymise the relevant personal data. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for statistical analysis and platform improvement purposes, as it no longer constitutes personal data.

Your Data Rights

As a keha88 player, you hold specific rights with respect to the personal data we hold about you. keha88 is committed to honouring these rights in a timely and transparent manner. All rights requests should be submitted in writing to [email protected]. We will acknowledge your request within five business days and aim to resolve it within 30 calendar days.

To exercise any of the rights listed above, send a written request to [email protected] from the email address registered to your keha88 account. Include your full name, registered username, and a clear description of the right you wish to exercise. keha88 will not charge a fee for processing rights requests submitted in good faith.

Data Security Measures

keha88 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures described below are reviewed and updated on a regular basis to reflect the current threat landscape.

• Encryption in transit: All data exchanged between your device and keha88.net is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites. HTTPS is enforced site-wide; all HTTP connections are redirected to HTTPS automatically. HTTP Strict Transport Security (HSTS) is enabled to prevent downgrade attacks.
• Encryption at rest: Personal data stored in keha88 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed using a dedicated key management service with access restricted to automated systems and a small number of authorised personnel.
• Access controls: Access to production systems containing personal data is restricted using role-based access control (RBAC). Staff members have access only to the data necessary to perform their specific job function. All privileged access is logged and subject to periodic review.
• Two-factor authentication: All internal keha88 staff accounts with access to systems containing personal data are required to use two-factor authentication (2FA). Player accounts are offered 2FA via registered Bangladeshi mobile number as an optional but strongly recommended security measure.
• Penetration testing: keha88 commissions periodic security assessments and penetration tests conducted by independent security specialists. Findings are remediated on a risk-prioritised basis. No assessment results are published externally, but the assessments inform our continuous security improvement programme.
• Incident response: keha88 maintains a documented data breach response plan. In the event of a security incident that affects player personal data, keha88 will notify affected players promptly by email to their registered address, providing details of what data was affected, the likely impact, and the steps keha88 has taken in response.
• Staff training: All keha88 employees who handle personal data receive mandatory data protection and information security training at induction and annually thereafter. Staff are required to adhere to a strict data handling policy as a condition of their employment.

Updates to This Privacy Policy

keha88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the keha88 platform itself. When we make material changes to this policy, we will notify registered players by email to their registered address at least seven days before the updated policy takes effect.

• Effective date: The effective date at the top of this Privacy Policy indicates when the current version came into force. The version number is updated with each revision.
• Notification of changes: For material changes — those that significantly affect how we collect, use, or share your personal data — keha88 will provide advance notice by email and will display a prominent notice on the keha88.net platform for a minimum of seven days following publication.
• Continued use as acceptance: Your continued use of the keha88 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised policy, you should cease using the platform and contact [email protected] to request account closure and data deletion.
• Version archive: keha88 maintains an archive of previous versions of this Privacy Policy. If you require a copy of a prior version for reference — for example, the version that was in force at the time you registered your account — please contact [email protected] with your request and we will provide it within ten business days.
• Contact for privacy matters: All privacy-related queries, data rights requests, and concerns about keha88's data handling practices should be directed to our support team. Email: [email protected]. Our support team is available 24 hours a day, seven days a week, and will acknowledge privacy-related inquiries within one business day.