Privacy Policy — ki88 Data Protection Commitment

Ki88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than for identity document verification purposes), or health data, unless you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request — in which case that information is used solely to protect your welfare and is handled with the strictest confidentiality.

Account Management and Service Delivery: The primary use of your personal data is to create and maintain your ki88 player account, authenticate your identity at login, process your deposits and withdrawals via bKash, Nagad, Rocket, and Bangladeshi bank transfers, credit winnings to your BDT wallet, and respond to your support enquiries. These uses are all necessary for the performance of the contract between you and ki88.

Identity and Age Verification: Ki88 uses identity data, including uploaded copies of your National ID card or passport, to confirm that you are who you claim to be and that you are at least 18 years of age. This verification is a legal obligation and is conducted by ki88's internal compliance team or by an approved third-party KYC service provider. Verification documents are stored securely and used only for compliance purposes.

Fraud Prevention and Security: Ki88 analyses technical data, financial transaction patterns, and gaming activity data to identify and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions. This processing is based on ki88's legitimate interest in maintaining a safe and fair platform for all players.

Responsible Gaming Monitoring: Ki88 uses your gaming activity data to monitor for signs of problem gambling behaviour, including escalating deposit frequency, extended uninterrupted play sessions, and repeated reversal of self-imposed limits. Where such patterns are identified, ki88 may proactively contact you with responsible gaming information or apply temporary account restrictions in accordance with our duty of care obligations.

Marketing and Promotions: With your explicit consent, ki88 may send you promotional communications about new games, seasonal offers (including BPL cashback, Eid reload bonuses, and Pohela Boishakh specials), and platform updates via email or SMS. You may withdraw consent at any time by following the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawing marketing consent does not affect the delivery of essential transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

Platform Improvement and Analytics: Ki88 uses aggregated, anonymised usage data to understand how players interact with the platform, which game categories are most popular, how the deposit and withdrawal flows perform, and where technical improvements are needed. This analytics data does not identify individual players and is used solely to enhance the overall platform experience.

Legal Compliance: Ki88 may be required to process and disclose personal data to comply with applicable laws, court orders, regulatory investigations, or requests from financial intelligence authorities in connection with anti-money laundering or fraud investigations. Such disclosures are made only to the extent required by law and are documented in ki88's compliance records.

The following categories of third parties may receive your personal data in connection with ki88's operations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and selected Bangladeshi banking partners receive the minimum financial and identity data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated financial institutions.
• KYC and Identity Verification Providers: Approved third-party KYC service providers may process copies of your identity documents on ki88's behalf for age and identity verification purposes. These providers are bound by strict data processing agreements and may not use your documents for any purpose other than verification.
• Game Software Providers: Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their game content within the ki88 platform. These providers do not receive your full identity or financial data.
• IT Infrastructure and Hosting Providers: Ki88's platform is hosted on secure server infrastructure managed by contracted providers. These providers have access to server-level data but are contractually prohibited from accessing or using player personal data independently.
• Anti-Fraud and Security Providers: Ki88 may use specialised third-party fraud detection services that analyse technical data (IP addresses, device fingerprints, login patterns) to identify suspicious activity. Data shared with these providers is technical in nature and does not include financial account details.
• Regulatory and Legal Authorities: Ki88 may be required to disclose player data to financial intelligence units, law enforcement agencies, or other regulatory bodies in response to legally binding requests. Such disclosures are made only after legal review and are documented in ki88's compliance records.

Ki88 does not share your personal data with advertising networks, data brokers, social media platforms, or any third party for the purpose of targeted advertising outside the ki88 platform. All data sharing is limited to what is functionally necessary and legally justified.

International Data Transfers: Some of ki88's service providers are located outside Bangladesh. Where personal data is transferred internationally, ki88 ensures that appropriate safeguards are in place, including contractual data protection clauses that provide a standard of protection equivalent to what you would expect under applicable data protection principles.

Ki88 does not use third-party advertising cookies or tracking pixels that follow your browsing activity across websites outside of ki88.im. You can manage all optional cookies through your browser's privacy settings. Instructions for managing cookies are available through the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

Disabling non-essential cookies will not affect your ability to deposit, play, or withdraw on ki88, though some personalisation features and analytics-driven platform improvements may be limited as a result.

Retention Periods: Ki88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account's active status plus a period of five years following permanent account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements applicable to online gambling platforms.
• KYC and Identity Verification Documents: Retained for five years from the date of verification completion or account closure, whichever is later.
• Customer Support Correspondence: Retained for three years from the date of the last communication, after which records are anonymised or deleted.
• Marketing Consent Records: Retained for as long as you hold an active ki88 account or until you withdraw consent, whichever comes first. Consent withdrawal records are retained for three years as evidence of compliance.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, ki88 will notify affected players without undue delay via email to the address registered on your account. Notification will include a description of the nature of the breach, the data affected, the likely consequences, and the steps ki88 has taken or is taking to address the situation.

Your Account Password: Ki88 stores account passwords using one-way cryptographic hashing. Ki88 staff cannot view your password. If you forget your password, use the password reset function on the login page. Never share your password with anyone, including ki88 support staff, who will never ask for it.

All players are required to confirm that they are at least 18 years of age during the registration process. Ki88 treats this declaration as a binding representation. Where ki88 has reasonable grounds to suspect that an account belongs to or is being used by a person under 18 — whether identified through date of birth discrepancy, identity document review, or third-party verification — the account will be immediately suspended pending full verification.

If it is confirmed that an account belongs to a person under 18, ki88 will:

• Permanently close the account with immediate effect.
• Return any net deposited funds (total deposits minus any bonus funds used) to the payment source used for deposit, after deducting any winnings derived from play, which are not payable to underage players.
• Delete all personal data associated with the underage account from ki88's systems within 30 days, except where retention is required for legal record-keeping purposes relating to the underage access incident.
• Report the incident to relevant compliance authorities where required by applicable law.

Parents and guardians who believe that a minor has created a ki88 account or accessed the platform are encouraged to contact ki88 support immediately at [email protected]. Ki88 will treat such reports with priority and respond within one business day.

Ki88 also recommends that parents and guardians in Bangladesh use parental control software to restrict access to online gambling platforms on devices shared with or accessible to minors. Ki88 takes its social responsibility obligations in this area seriously and supports all reasonable efforts to keep gambling services away from underage individuals.

Policy Amendments: Ki88 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected, a change in how data is shared with third parties, or a significant change in retention periods — ki88 will notify registered players via email to the address on file at least 14 days before the revised policy takes effect. Minor clarifications or corrections may be published without advance notice.

The effective date displayed at the top of this page and in the header of each version reflects when that version of the Privacy Policy came into force. Your continued use of ki88 after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you may close your account before the effective date of the change by contacting [email protected].

Contacting Ki88 About Privacy: For all privacy-related enquiries, data rights requests, concerns about how your personal data is being handled, or to report a suspected data breach, please contact ki88 using the details below. Please use plain text email only — do not include sensitive personal data such as full payment card numbers or passwords in any email correspondence.

• Privacy Enquiries Email: [email protected] (subject line: "Privacy Enquiry")
• Data Rights Requests: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 on ki88.im in English, Bangladesh Standard Time (UTC+6)
• Response Time: Ki88 aims to acknowledge all privacy-related emails within two business days and to provide a substantive response within 30 calendar days.

Ki88 takes all privacy concerns seriously. If you are not satisfied with ki88's response to a privacy enquiry or rights request, you may escalate the matter through ki88's published complaint procedure, details of which are available by contacting [email protected].