kt88 Privacy Policy

Section 1

Introduction

kt88 is committed to protecting the privacy and personal data of every player who uses the kt88 platform. This Privacy Policy sets out in clear terms how kt88 collects, processes, stores, shares, and protects the personal data of individuals who register an Account, make a deposit, place a bet, interact with customer support, or otherwise engage with kt88 services accessible at kt88.im.

This Privacy Policy applies to all kt88 players based in Bangladesh and to all personal data collected through the kt88 website, mobile-optimised platform, and associated communication channels including live chat, email, and SMS. It should be read together with the kt88 Terms & Conditions, which form the overall agreement between you and kt88.

By creating a kt88 Account or continuing to use the kt88 platform after this Policy's effective date, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must cease using the kt88 platform and contact our support team to request Account closure.

Section 2

Data We Collect

kt88 collects personal data through several channels: directly from you during registration and Account use, automatically through your interaction with the platform, and — in limited circumstances — from third-party verification providers. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create a kt88 Account, we collect the information you provide during the registration process, which includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Residential address in Bangladesh (district, thana, full postal address)
• Mobile phone number registered to your preferred Bangladesh payment method
• Email address (if provided as an alternative contact channel)
• Username and encrypted account password

2.2 Identity Verification (KYC) Data

For the purposes of Know Your Customer (KYC) compliance and to protect against identity fraud, kt88 may request and collect copies of identity documents including:

• National Identity Card (NID) — front and back image
• Passport biographical data page
• Birth certificate (where NID or passport is unavailable)
• Proof of address documents such as a utility bill or bank statement dated within 90 days
• Selfie photograph or live video verification where required

2.3 Financial and Transaction Data

kt88 records all financial transactions conducted through your Account. This includes:

• Deposit amounts, dates, and payment method references (e.g., bKash transaction ID, Nagad reference number)
• Withdrawal requests, amounts, processing times, and destination payment details
• Account balance history
• Bonus credits, wagering progress, and bonus-related transactions

kt88 does not store your full mobile wallet PIN, card CVV, or any sensitive authentication credential linked to your bKash, Nagad, Rocket, or Upay account. Payment authentication is handled directly by the respective payment provider.

2.4 Betting and Gaming Activity Data

kt88 records a full log of your betting and gaming activity on the platform, including:

• Bets placed — market, selection, odds, stake amount, and outcome
• Casino game sessions — game title, provider (e.g., Pragmatic Play, Evolution Gaming), session duration, wager amounts, and results
• Crash game participation history (e.g., Aviator via Spribe)
• In-play betting interactions and live casino session data

2.5 Technical and Device Data

When you access the kt88 platform, we automatically collect certain technical data about your device and browsing session. This data includes:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features accessed
• Referral URL (the page from which you arrived at kt88.im, if applicable)
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Customer Support Communications

When you contact kt88 Support via live chat or email, we retain a record of the communication. This includes the content of your messages, any documents or screenshots you share with our team, and the outcome of the support interaction. These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

Section 3

How We Use Your Data

kt88 uses the personal data it collects for the following specific purposes:

kt88 does not use your personal data for automated profiling that produces legal effects or similarly significant consequences without human review. Responsible gaming monitoring systems may flag Account activity for human review by the kt88 Compliance team, but no adverse action is taken based on automated processing alone.

Section 4

Legal Basis for Processing

kt88 processes your personal data on the following legal bases:

4.1 Contractual Necessity

The majority of the personal data processing described in this Policy is necessary to perform the contract between you and kt88 — specifically, to provide the betting and gaming services you have registered to use, to process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to manage your kt88 Account.

4.2 Legitimate Interests

kt88 processes certain categories of data on the basis of its legitimate interests as a platform operator, where those interests are not overridden by your privacy rights. This includes fraud detection, security monitoring, platform improvement, responsible gaming intervention systems, and customer support quality management.

4.3 Legal Obligation

Some processing is required to comply with legal and regulatory obligations, including anti-money laundering (AML) requirements, know your customer (KYC) standards, and data retention obligations applicable to financial services operations.

4.4 Consent

Where kt88 processes your personal data for marketing communications — including promotional emails, SMS messages about bonuses, and seasonal offers around Eid, Pohela Boishakh, or the Bangladesh Premier League — that processing is based on your explicit consent, given at registration or through subsequent opt-in. You may withdraw this consent at any time; see Section 12 for details.

Section 5

Data Sharing and Disclosure

kt88 does not sell your personal data to third parties. We share personal data only in the specific, limited circumstances described below.

5.1 Payment Processing Partners

To process your deposits and withdrawals, kt88 shares the minimum necessary transaction data with the relevant Bangladesh payment providers: bKash, Nagad, Rocket, and Upay. The data shared is limited to what is required to complete the transaction and is governed by each payment provider's own privacy terms and security standards.

5.2 Identity Verification Providers

Where kt88 uses a third-party KYC or identity verification service to assist with document verification, your identity documents and verification images may be shared with that provider for the sole purpose of completing the verification. Such providers are contractually prohibited from using your data for any purpose other than fulfilling the verification request made by kt88.

5.3 Game Content Providers

Casino game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game servers that your device connects to when you play their games on kt88. These providers may receive technical session data (such as a session token and game result data) necessary to operate the game. They do not receive your full identity or payment details.

5.4 Legal and Regulatory Disclosure

kt88 may disclose personal data to relevant authorities where required by law, court order, or where kt88 reasonably believes that disclosure is necessary to prevent fraud, protect the rights of other players, or ensure the safety and integrity of the platform. kt88 will, where legally permissible, notify the relevant Account holder of any such disclosure request.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets involving kt88, personal data held by kt88 may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to equivalent privacy protections, and kt88 players would be notified before their data was transferred to a new data controller.

Section 6

Payment Data

kt88 takes a minimisation-first approach to payment data. The platform is designed so that sensitive payment authentication credentials — including mobile wallet PINs, OTP codes, and bank card CVV numbers — are entered directly into the relevant payment provider's own secure interface and are never transmitted to or stored on kt88 servers.

The payment data that kt88 does retain includes transaction reference numbers (e.g., a bKash or Nagad transaction ID), the mobile number associated with the payment account, the transaction amount, and the date and time of the transaction. This data is retained for a minimum of 5 years to satisfy financial record-keeping obligations and to support the resolution of any payment disputes raised by players.

Section 7

Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your visit — such as your login session, language preferences, and how you navigated the site. kt88 uses cookies and similar technologies including local storage and session tokens to operate the platform effectively.

7.2 Types of Cookies Used by kt88

• Strictly Necessary Cookies: These cookies are essential to the operation of the kt88 platform. They maintain your login session, preserve your Account settings during a session, and ensure that security features function correctly. These cookies cannot be disabled without preventing the platform from working.
• Functional Cookies: These cookies remember your preferences — such as your chosen display settings and recently visited game sections — so that you do not need to reset them on each visit. They improve the overall quality of your kt88 experience.
• Analytics Cookies: kt88 uses analytics data to understand how players navigate the platform, which features are used most frequently, and where technical issues arise. Where possible, this data is aggregated and anonymised before analysis.
• Marketing and Attribution Cookies: If you arrive at kt88 through a tracked promotional link, a cookie may be placed to attribute your registration to the relevant campaign. This helps kt88 measure the effectiveness of its promotions.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, and delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your kt88 Account and using the platform's core features. Blocking analytics or marketing cookies will not affect your access to kt88 services.

Section 8

Data Security

kt88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and kt88.im is encrypted in transit using industry-standard SSL/TLS protocols, the same technology used by major international banking institutions.
• Encrypted Data Storage: Sensitive personal data — including identity documents and authentication credentials — is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data is strictly limited to kt88 staff members who require it to perform their specific job functions. All staff with data access are subject to confidentiality obligations and receive regular data security training.
• Intrusion Detection and Monitoring: kt88 operates continuous security monitoring systems designed to detect and respond to unauthorised access attempts, suspicious login patterns, and potential data breaches in real time.
• Two-Factor Authentication: kt88 offers optional two-factor authentication (2FA) for player Accounts. We strongly recommend enabling 2FA to protect your Account, particularly if you access kt88 from shared or public devices.
• Regular Security Reviews: kt88 conducts regular reviews of its security systems and procedures, including vulnerability assessments and reviews of third-party provider security standards.

While kt88 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, kt88 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

Section 9

Data Retention

kt88 retains personal data only for as long as it is necessary for the purposes for which it was collected or as required by applicable legal and compliance obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Section 10

Your Rights

As a kt88 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact kt88 Support via live chat or email at [email protected]. kt88 will respond to all valid data rights requests within 30 days.

10.1 Right of Access

You have the right to request a copy of all personal data that kt88 holds about you. kt88 will provide this data in a structured, commonly used, and machine-readable format. The first access request is fulfilled free of charge; subsequent requests within a 12-month period may be subject to a reasonable administration fee.

10.2 Right to Rectification

If any personal data that kt88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For changes to core identity data (name, date of birth), updated identity documents may be required as supporting evidence before corrections are applied.

10.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no overriding legal basis for continued processing. Note that kt88 may be unable to delete certain data where retention is required by law, such as transaction records subject to AML retention obligations.

10.4 Right to Restrict Processing

You have the right to request that kt88 restrict the processing of your personal data in certain circumstances — for example, while a correction request is being evaluated, or where you have objected to processing and kt88 is assessing whether its legitimate interests override your objection.

10.5 Right to Data Portability

You have the right to receive a copy of the personal data you have provided to kt88 in a structured, machine-readable format, and to request that this data be transmitted directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on kt88's legitimate interests. kt88 will assess your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may always object to processing for direct marketing purposes without needing to provide any justification; such objections will be honoured immediately.

Section 11

Children and Minors

The kt88 platform is strictly restricted to individuals who are 21 years of age or older. kt88 does not knowingly collect personal data from any person under the age of 21.

kt88 uses date-of-birth verification at registration and reserves the right to request identity documents to confirm a player's age at any point during the Account lifecycle. Age verification is a non-negotiable requirement that cannot be waived under any circumstances.

Section 12

Marketing Communications

kt88 may send you promotional and marketing communications — including information about deposit bonuses, free bet offers, seasonal promotions tied to events such as the Bangladesh Premier League (BPL), IPL, Eid, and Pohela Boishakh — where you have provided your explicit consent to receive such messages.

Marketing communications may be delivered via SMS to your registered mobile number or via email to your registered email address. kt88 will not send unsolicited marketing communications to players who have not opted in.

12.1 Opting Out of Marketing

You may withdraw your consent to receive marketing communications at any time using any of the following methods:

• Updating your communication preferences within your kt88 Account settings
• Replying "STOP" to any kt88 SMS marketing message
• Clicking the unsubscribe link included in any kt88 marketing email
• Contacting kt88 Support via live chat and requesting removal from all marketing lists

Opt-out requests will be processed within 5 business days. Opting out of marketing communications does not affect essential service communications — you will continue to receive transactional messages related to your Account activity, such as deposit confirmations, withdrawal notifications, and security alerts, regardless of your marketing preferences.

Section 13

Third-Party Links

The kt88 platform may contain references to game studios, payment partners, and other third-party services. Where the kt88 platform links to or integrates with a third-party service, that third party operates under its own privacy policy and data practices. kt88 is not responsible for the privacy practices of third-party providers, and this Privacy Policy does not extend to any data collected directly by those providers through their own interfaces.

Players are encouraged to review the privacy policies of any third-party payment provider — including bKash, Nagad, Rocket, and Upay — before using those services in connection with their kt88 Account. kt88 selects payment and technology partners with strong privacy and security track records, but cannot guarantee the conduct of independent third-party organisations beyond the contractual obligations imposed on them by kt88.

Section 14

Policy Amendments

kt88 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in kt88's data processing practices, the introduction of new platform features, or feedback received from players and regulators.

When a material change is made to this Privacy Policy, kt88 will notify registered players via the primary contact method on file — typically an SMS to your registered mobile number or a notification displayed upon your next login. The updated Policy will be published at kt88.im/privacy-policy with a revised effective date clearly stated at the top of the document.

Your continued use of the kt88 platform following the notification of a Policy update constitutes your acceptance of the revised terms. If you do not agree with a proposed change, you must cease using the kt88 platform and contact our support team to request Account closure before the revised Policy takes effect.

Section 15

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 10, or wish to raise a concern about how kt88 has handled your personal data, please contact the kt88 Privacy and Data team using the details below.

kt88 Player Support is available 24 hours a day, 7 days a week — including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March) — via live chat on the kt88 platform.

Email: [email protected]

When contacting kt88 regarding a data privacy matter, please include your registered kt88 username, a clear description of your request or concern, and the date on which the relevant event occurred (if applicable). This will allow our team to locate the relevant records and respond to you as efficiently as possible.

kt88 aims to acknowledge all privacy-related requests within 24 hours and to provide a full substantive response within 30 calendar days of receipt. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further 30 days; in such cases, we will notify you of the extension and the reasons for it before the original 30-day deadline expires.