kh88 Privacy Policy —
How We Handle Your Data

kh88 is an online gaming and sports betting platform accessible at kh88.lol. References in this Privacy Policy to "kh88", "we", "us", or "our" refer to the kh88 brand and its affiliated operating entities responsible for the kh88 platform and the processing of your personal data.

kh88 operates as the data controller in respect of the personal data of all registered users ("Users") of the kh88 platform. As data controller, kh88 determines the purposes and means by which your personal data is processed and bears responsibility for ensuring that such processing is carried out in accordance with applicable data protection standards.

For any data protection queries, requests, or concerns, Users may contact kh88 at any time using the contact details set out in Section 13 of this Privacy Policy.

kh88 collects personal data in several ways: directly from you when you register an Account, deposit funds, or contact support; automatically through your use of the platform; and, where applicable, from third-party verification providers. The categories of personal data we collect include:

kh88 does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless compelled to do so by a specific regulatory obligation, in which case you will be notified in advance.

kh88 uses personal data collected from Users for the following specific purposes:

• Account management: To create, maintain, and administer your kh88 Account, including processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
• Identity and age verification: To carry out KYC checks, confirm that you are at least 21 years of age, and verify your identity in compliance with applicable anti-money laundering and responsible gaming obligations.
• Service delivery: To provide access to betting markets, casino games, Crash, slot games, Captain Fisher, and all other kh88 platform features.
• Customer support: To respond to your enquiries, process complaints, and deliver multilingual (Urdu and English) 24/7 support.
• Fraud prevention and security: To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities on the kh88 platform.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and comply with responsible gaming obligations.
• Legal and regulatory compliance: To fulfil obligations under applicable laws and licensing requirements, including record-keeping, reporting, and cooperation with competent authorities.
• Platform improvement: To analyse anonymised usage data for the purpose of improving platform features, user experience, and service quality.
• Marketing communications: To send you relevant promotional offers and updates via email or SMS, where you have provided explicit consent and have not subsequently withdrawn it. You may opt out at any time.

kh88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform the contract between you and kh88 — primarily the management of your Account, processing of transactions, and delivery of platform services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, KYC requirements, licensing conditions, and responsible gaming regulations.
• Legitimate interests: Processing carried out for kh88's legitimate business interests, such as fraud prevention, platform security, improving user experience, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where kh88 relies on legitimate interests as the legal basis for any processing activity, we have assessed that such processing is necessary, proportionate, and does not override the data protection rights of Users.

kh88 does not sell or rent your personal data to any third party. We may share your personal data with carefully selected third parties only in the following circumstances and for the following purposes:

• Payment processors: Sharing of transaction data with payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processors) strictly for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: Sharing of identity and document data with KYC and age-verification service providers for the purpose of fulfilling regulatory verification obligations.
• Fraud and security providers: Sharing of technical and usage data with anti-fraud platforms for the purpose of detecting and preventing fraudulent activity, bonus abuse, and other prohibited conduct.
• Regulatory and law enforcement authorities: Disclosure of data where required by applicable law, court order, regulatory direction, or where kh88 has a bona fide obligation to report suspicious activity to competent authorities.
• Technology and platform providers: Sharing of data with hosting, cloud infrastructure, analytics, and game content providers who process data strictly on kh88's behalf under binding data processing agreements.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of kh88's business, personal data held by kh88 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

kh88 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to operate and improve the kh88 platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Used to collect anonymised data about how Users interact with the kh88 platform — pages visited, time spent, navigation paths — for the purpose of improving platform performance and user experience. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats, including cross-site request forgery (CSRF) protection tokens.

kh88 does not deploy third-party advertising cookies or retargeting pixels that track your behaviour across external websites for commercial advertising purposes.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the kh88 platform. Strictly necessary cookies cannot be disabled through browser settings while you remain logged in to your kh88 Account.

kh88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following general retention principles apply:

• Active Account data: Personal data associated with an active kh88 Account is retained for the duration of the Account's active status and for a period thereafter as required by regulatory retention obligations.
• Transaction and financial records: Financial transaction data, including PKR deposit and withdrawal records, is retained for a minimum period as required under applicable anti-money laundering and financial record-keeping regulations.
• KYC and compliance records: Identity verification documents, KYC records, and compliance-related data are retained for the legally prescribed minimum period following Account closure or the last transaction, whichever is later.
• Support and communications data: Live chat logs and support email correspondence are retained for a reasonable period for quality assurance, dispute resolution, and regulatory compliance purposes.
• Self-excluded users: Where a User has requested self-exclusion under kh88's Responsible Gaming Policy, sufficient data to enforce the self-exclusion will be retained for the full duration of the exclusion period and beyond, to prevent re-registration during any permanent exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual.

kh88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption of data in transit using TLS (Transport Layer Security) protocols across all kh88 platform connections.
• Encryption of personal data at rest using industry-standard encryption algorithms.
• Strict internal access controls ensuring that personal data is accessible only to authorised kh88 personnel on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of kh88 platform infrastructure.
• Multi-factor authentication requirements for internal systems that handle personal data.
• Staff training on data protection obligations and information security best practices.

Notwithstanding the above, no method of data transmission over the internet or electronic storage system is completely secure. While kh88 takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. Users are also responsible for maintaining the security of their own kh88 Account credentials.

Subject to applicable law and any overriding legal obligations, kh88 Users hold the following rights in respect of their personal data:

• Right of access: You have the right to request a copy of the personal data that kh88 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data held by kh88. You may update certain Account details directly through your Account settings page.
• Right to erasure: You may request that kh88 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to kh88's legal obligations to retain certain data.
• Right to restrict processing: You may request that kh88 temporarily restrict the processing of your personal data in certain circumstances — for example, while a request for rectification is being verified.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
• Right to object: You have the right to object to the processing of your personal data where kh88 relies on legitimate interests as the legal basis, or where data is used for direct marketing purposes. Marketing opt-outs take effect promptly upon receipt of your request.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your registered Account username and a clear description of your request. kh88 will acknowledge your request promptly and provide a substantive response within a reasonable timeframe, and in any event within the period required under applicable law.

kh88 reserves the right to verify your identity before processing any data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party.

The kh88 platform is strictly intended for adults aged 21 years and above. kh88 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21.

Age verification is conducted as part of the kh88 Account registration and KYC process. Where kh88 becomes aware — through KYC review, parental notification, or any other means — that personal data belonging to an underage individual has been collected, kh88 will immediately:

• Suspend and permanently close the associated Account.
• Return any deposited funds to the originating payment account, minus any winnings in accordance with kh88's responsible gaming obligations.
• Permanently delete all personal data associated with the underage individual from kh88's systems, subject to any minimal retention required by law.

kh88 also recommends the use of parental control tools and filtering software to prevent underage individuals from accessing online gaming platforms. Further guidance on protecting minors from online gambling is available through responsible gaming advocacy organisations operating under the framework of kh88's licensing jurisdiction.

The kh88 platform may from time to time contain references to or integrations with third-party services, including game content providers, payment processors, and identity verification platforms. While kh88 exercises care in selecting third-party partners, we are not responsible for the privacy practices or data protection standards of any third-party service provider.

This Privacy Policy applies solely to the kh88 platform and to personal data processed by kh88 as data controller. It does not extend to any third-party website, application, or service that you may access in connection with your use of kh88.

We encourage all Users to review the privacy policies of any third-party services they interact with, particularly payment services such as JazzCash and EasyPaisa, which operate under their own independent privacy and data governance frameworks.

kh88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or our data processing practices. Where a material change is made to this Privacy Policy, kh88 will notify registered Users by email or by displaying a prominent notice on the kh88 platform prior to the change taking effect.

The "Last updated" date displayed at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage Users to review this Privacy Policy periodically to remain informed about how kh88 handles their personal data.

Your continued use of the kh88 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. Where a change materially affects the way in which kh88 processes your personal data and consent is required, kh88 will seek your consent before applying the change to your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kh88 handles your personal data, please contact the kh88 data protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the kh88 platform in both Urdu and English. Live chat is the fastest way to raise a privacy-related concern.
• Email: [email protected] — please use the subject line "Privacy Enquiry" and include your registered Account username in all correspondence.

kh88 aims to acknowledge all privacy-related written enquiries promptly and to provide a substantive response within a reasonable period. For formal data rights requests — such as access, erasure, or portability requests — please refer to Section 9 of this Privacy Policy for the full submission procedure.