ki88 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how ki88 ("we", "us", "our") collects, uses, stores, and shares personal information relating to users ("you", "your") of the ki88 platform available at ki88.lol. This Policy applies to all users regardless of how they access the platform — whether through a mobile browser, a desktop browser, or any other access method. By creating an account or using the ki88 platform in any way, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside ki88's Terms and Conditions, which govern your use of the platform as a whole. Where there is any conflict between this Policy and the Terms and Conditions, the Terms and Conditions will prevail in relation to matters of platform use, and this Policy will prevail in relation to matters of data protection and privacy.

Information We Collect

ki88 collects personal information that is necessary to provide our services, verify your identity, process payments, comply with legal obligations, and improve the quality of our platform. The categories of personal data we collect, and the primary reason for collecting each category, are set out in the table below.

ki88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless we are specifically required to do so by law. We do not collect any data from users who are under the age of 21. If we discover that we have inadvertently collected data from an underage user, we will delete that data immediately.

How We Use Your Information

ki88 uses the personal data it collects exclusively for legitimate operational and compliance purposes. We do not engage in speculative or experimental use of your data. The following is a complete and accurate account of how your personal data is used within the ki88 platform.

• Account management: to create, maintain, and close your ki88 account, including processing your registration details, verifying your identity, and managing your account preferences and communication settings.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment channels, and to maintain accurate financial records in compliance with applicable law.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal or prohibited conduct on the platform.
• Responsible gaming: to monitor your account activity for signs of problem gambling behaviour, to apply self-imposed limits and exclusions, and to contact you where our monitoring systems identify a pattern that may indicate harmful gambling.
• Customer support: to respond to your support requests, complaints, and account queries, and to maintain a record of communications between you and ki88 for quality assurance purposes.
• Platform improvement: to analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the ki88 platform. No individual user is identifiable from the anonymised data sets used for this purpose.

ki88 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight. Our responsible gaming monitoring and fraud detection systems may generate automated flags, but all decisions resulting in account restrictions or closures are reviewed by a human member of the ki88 team before being implemented.

Legal Basis for Processing

ki88 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely for each category of processing activity are as follows.

• Contractual necessity: the processing of identity, contact, and financial data is necessary for ki88 to fulfil its contractual obligations to you under the Terms and Conditions — specifically to operate your account, process your transactions, and provide the gaming and betting services you have requested.
• Legal obligation: ki88 is required by applicable law to collect and retain certain categories of personal data — particularly identity verification data and financial transaction records — for purposes including anti-money-laundering compliance, KYC verification, and regulatory reporting. This processing is not optional and cannot be restricted or objected to by users.
• Legitimate interests: ki88 processes technical and behavioural data on the basis of its legitimate interests in preventing fraud, maintaining platform security, monitoring for responsible gaming compliance, and improving the quality of its services — provided those interests are not overridden by your fundamental privacy rights.
• Consent: where ki88 wishes to use your personal data for purposes that are not strictly necessary (for example, sending you personalised promotional communications), we will ask for your explicit consent before doing so. You may withdraw your consent at any time by contacting ki88 support, and withdrawal of consent will not affect the lawfulness of any processing carried out prior to that withdrawal.

Cookies and Tracking Technologies

ki88 uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to remember your preferences, and to analyse how the platform is used. The following types of cookies may be placed on your device when you use ki88.

• Essential cookies: these are required for the platform to function and cannot be disabled. They include session authentication tokens, security cookies that protect against cross-site request forgery, and cookies that remember your language preference and login state.
• Functional cookies: these remember choices you make on the platform — such as your preferred currency display, notification preferences, and recent game history — so that you do not have to reconfigure these settings on every visit.
• Analytics cookies: ki88 uses anonymised analytics tools to understand how users navigate the platform, which features are most used, and where usability issues occur. The data collected by analytics cookies is aggregated and cannot be used to identify individual users.
• Security and fraud prevention cookies: these cookies help ki88 identify unusual or suspicious access patterns — for example, a login attempt from an unrecognised device or location — and allow our security systems to flag these for review.

You can manage non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the ki88 platform — in particular, disabling essential cookies will prevent you from logging in to your account.

Sharing Your Information

ki88 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

• Payment processors: to process deposits and withdrawals, ki88 must share transaction-relevant data with your payment provider (e.g., bKash, Nagad, Rocket). This is limited to the information strictly required to complete the transaction and is governed by each provider's own data protection practices.
• Game providers: ki88's game library is powered by third-party game studios. When you launch a game, your account reference and session data are shared with the relevant game provider to load the game and record outcomes. Game providers do not receive your full personal profile and are contractually prohibited from using session data for any purpose other than delivering the game.
• Regulatory and law enforcement authorities: ki88 is required by law to disclose certain personal data to regulatory bodies and law enforcement agencies upon receipt of a valid legal request. ki88 will not disclose more data than is legally required and will, where permitted by law, notify affected users of any such disclosure.
• Professional advisers: ki88 may share personal data with its legal counsel, auditors, and other professional advisers where necessary for the purpose of obtaining professional advice or defending legal claims. All such advisers are bound by strict confidentiality obligations.

Data Retention

ki88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold.

• Account and identity data: retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with AML and KYC regulatory requirements applicable in Bangladesh.
• Financial transaction records: retained for a minimum of 7 years following each transaction, in line with standard financial record-keeping obligations. This includes deposit records, withdrawal records, and bonus transaction logs.
• Support communications: retained for 3 years from the date of each support interaction, to allow ki88 to refer to the history of a user's account in the event of a future complaint or dispute.

At the end of the applicable retention period, personal data is either securely deleted from ki88's systems or anonymised so that it can no longer be associated with an identifiable individual. ki88 conducts periodic data audits to ensure that data is not held beyond its required retention period.

Data Security

ki88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, loss, destruction, or disclosure. Our security programme includes the following measures.

• SSL/TLS encryption: all data transmitted between your device and the ki88 platform is encrypted using industry-standard SSL/TLS protocols. This protects your personal and financial data from interception during transmission.
• Access controls: access to personal data stored on ki88's systems is restricted on a need-to-know basis. Only authorised ki88 personnel with a legitimate operational reason are permitted to access user data, and all access is logged for audit purposes.
• Password hashing: account passwords are stored as cryptographic hashes and never in plaintext. ki88 cannot retrieve your password — if you forget it, you must use the password reset process to create a new one.
• Intrusion detection and monitoring: ki88 operates continuous security monitoring on its infrastructure to detect and respond to potential security threats in real time. Our security team reviews alerts around the clock and follows a documented incident response procedure.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, ki88 will notify affected users without undue delay. Notification will be sent to the contact details held on your account and will include a description of the breach, the likely consequences, and the measures ki88 has taken or proposes to take to address it.

Your Privacy Rights

As a user of ki88, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ki88 support using the email address shown at the bottom of this page. ki88 will respond to all valid requests within 30 days.

• Right of access: you have the right to request a copy of all personal data that ki88 holds about you. We will provide this in a structured, commonly used, machine-readable format at no charge.
• Right to rectification: if any personal data ki88 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account details directly through your account settings.
• Right to erasure: you have the right to request that ki88 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right is subject to our legal retention obligations — we cannot delete data that we are required by law to keep.
• Right to restriction: you may request that ki88 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to data portability: where processing is based on your consent or on contractual necessity, you may request that ki88 provide your personal data in a portable format so that you can transfer it to another service provider.
• Right to object: you have the right to object to the processing of your personal data where that processing is based on ki88's legitimate interests. You also have the absolute right to object to the use of your personal data for direct marketing purposes at any time.

ki88 will not charge you a fee for submitting a valid privacy rights request. However, where requests are manifestly unfounded or excessive — in particular, where the same request is repeated unnecessarily — ki88 reserves the right to charge a reasonable administrative fee or to refuse the request, with written reasons given.

Children's Privacy

The ki88 platform is strictly intended for adults aged 21 and above. ki88 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. The platform's age verification procedures are designed to prevent underage registration, and any account identified as belonging to a minor will be immediately closed and all associated data deleted.

Payment Data and Financial Privacy

ki88 treats financial data with the highest level of confidentiality. The following specific rules apply to the handling of payment-related personal data on the ki88 platform.

• ki88 does not store full card numbers, card verification values (CVV), or mobile banking PINs. Payment credentials are processed directly by the relevant payment provider (e.g., bKash, Nagad, Visa) and are never transmitted to or stored on ki88's servers in their full form.
• ki88 retains a reference identifier for each payment method linked to your account (for example, the last four digits of a card number or a masked mobile number). This is used solely to associate a withdrawal with the correct payment method and to comply with AML requirements — it cannot be used to initiate a transaction.
• All financial transaction records held by ki88 — including deposit amounts, withdrawal amounts, dates, and payment method references — are treated as strictly confidential and are not shared with any third party other than as required by AML regulations or as described in Section 6 of this Policy.

Players who have questions about a specific transaction — including requests to clarify a deposit or withdrawal record — should contact ki88 support. Support agents have access to your transaction history within ki88's system and can provide a full breakdown of any transaction upon request, subject to identity verification.

Changes to This Privacy Policy

ki88 may update this Privacy Policy from time to time to reflect changes in applicable law, changes in our data processing practices, or improvements to the platform. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page. Where changes are significant, we will also provide notice to registered users via the contact information held on their account before the changes take effect.

Your continued use of the ki88 platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any aspect of the revised Policy, you should stop using the platform and may request account closure by contacting ki88 support. We recommend that you review this Policy periodically to stay informed of how we protect your personal data.