kf88 Privacy Policy

kf88 ("we", "us", "our") operates the online betting and casino platform accessible at kf88.io (the "Platform"), which is designed and maintained for players based in Bangladesh. We are committed to protecting the privacy and personal data of every individual who accesses, registers on, or interacts with the Platform in any capacity.

This Privacy Policy ("Policy") sets out in clear and formal terms: what categories of personal data kf88 collects from you; the purposes for which that data is processed; the legal bases upon which processing is carried out; the conditions under which data may be shared with third parties; the security measures kf88 employs to protect your data; and the rights you hold as a data subject.

This Policy should be read in conjunction with the kf88 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into this document. By creating an account on the Platform or by continuing to use the Platform after any update to this Policy, you confirm that you have read and accepted this Policy in full.

kf88 collects the following categories of personal data from players and prospective players:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity photo for KYC), or health data, except where you voluntarily disclose such information in the context of a responsible gaming request.

kf88 collects personal data through the following channels:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotional activities.
• Automated collection: Technical and usage data collected automatically by our servers, analytics tools, and cookie mechanisms when you access and interact with the Platform. This includes IP address logging, session tracking, and event-level gameplay data.
• Third-party sources: Identity and fraud-screening data received from KYC verification partners; transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card network partners; risk and geolocation signals from fraud prevention services.
• Referral sources: If you arrive at kf88 via an affiliate or referral partner, we may receive limited data from that partner confirming the referral relationship. This data is used solely for attribution purposes and does not include your full personal profile.

kf88 processes your personal data only where a valid legal basis exists for doing so. The legal bases applicable to our processing activities are as follows:

• Contractual necessity: Processing that is necessary to perform our contract with you — including registering your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification mandates, and fraud prevention obligations.
• Legitimate interests: Processing carried out in pursuit of kf88's legitimate business interests, including fraud detection, platform security, product improvement, and internal analytics — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for marketing communications and for the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kf88 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your kf88 account, verifying your identity, processing login authentication, and managing account settings and preferences.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card networks; reconciling transaction records; and investigating disputed transactions.
• Regulatory compliance: Performing Know Your Customer (KYC) checks, monitoring transactions for suspicious activity in accordance with AML obligations, maintaining records as required by applicable law, and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: Detecting and investigating fraudulent activity, multi-accounting, bonus abuse, collusion, and other prohibited conduct; protecting the integrity of the Platform; and safeguarding the interests of legitimate players.
• Platform personalisation: Tailoring the Platform experience to your preferences, including displaying relevant game recommendations, personalised promotional offers, and localised content for the Bangladesh market.
• Customer support: Responding to enquiries, complaints, and support requests received via live chat, email, or WhatsApp; maintaining records of support interactions for quality assurance purposes.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling; administering self-exclusion, deposit limit, and cool-off requests; and communicating with players where responsible gaming concerns arise.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about kf88 events — including BPL and IPL cricket promotions, Eid special offers, and Pohela Boishakh campaigns — where you have provided consent or where permitted under applicable law. You may opt out of marketing communications at any time.
• Analytics and product development: Analysing anonymised and aggregated usage data to improve the Platform's features, performance, and user experience.

kf88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purposes of processing deposit and withdrawal transactions.
• Identity verification partners: Third-party KYC and AML screening services that assist kf88 in verifying player identity documents and screening against sanctions and watchlists.
• Game content providers: Casino game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session tokens to enable game delivery. These providers do not receive your full personal profile.
• Technology service providers: Hosting, cloud infrastructure, analytics, and cybersecurity vendors who process data on kf88's behalf under strict data processing agreements and are prohibited from using your data for their own purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, kf88 will disclose personal data to the relevant authority. kf88 will, where legally permitted, notify you of such a disclosure request.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary to obtain professional advice and where such parties are bound by professional confidentiality obligations.

Any third party receiving personal data from kf88 is required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared.

kf88 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate and improve the Platform. The following categories of cookies are in use:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: These remember your preferences — such as language settings, display preferences, and previously used payment methods — to provide a more personalised and efficient experience on return visits.
• Analytics cookies: These collect anonymised, aggregated data about how players interact with the Platform, including pages visited, time on site, and navigation paths. This data is used internally to improve Platform performance and user experience. No personally identifiable information is transmitted via analytics cookies.
• Marketing and attribution cookies: Where you have provided consent, these cookies track whether you arrived at kf88 via an affiliate partner and help us attribute conversions accurately. They may also be used to limit the frequency of promotional messages you receive.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available via the help documentation for your specific browser.

kf88 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the kf88 Platform.
• Encryption at rest for sensitive personal data stored on kf88's servers, including identity documents and financial data.
• Role-based access control (RBAC) ensuring that kf88 staff members can only access personal data that is strictly necessary for their job function.
• Multi-factor authentication (MFA) required for all kf88 administrative systems that hold personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures that enable rapid detection, containment, and notification in the event of a data security incident.

While kf88 takes every reasonable precaution to secure your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying kf88 immediately at [email protected] if you suspect any unauthorised access to your account.

kf88 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedule applies as a general guide:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from kf88's systems or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

As a data subject, you hold the following rights in relation to your personal data held by kf88. These rights may be exercised by contacting our support team at [email protected]:

• Right of access: You may request a copy of all personal data that kf88 holds about you, together with information about how it is processed.
• Right to rectification: You may request the correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing carried out on the basis of legitimate interests. This right is subject to legal retention obligations that may require kf88 to retain certain data.
• Right to restriction of processing: You may request that kf88 temporarily suspend the processing of your personal data while accuracy is contested, or where processing is unlawful but you do not wish data to be erased.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests at any time. kf88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

kf88 aims to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it. There is no charge for exercising any of the above rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The kf88 Platform is strictly intended for adults aged 21 and above. kf88 does not knowingly collect, process, or retain personal data relating to any person under the age of 21. Registration by minors is expressly prohibited and constitutes a material breach of the kf88 Terms & Conditions.

Where kf88 becomes aware, or has reasonable grounds to suspect, that an account has been registered by a person under the age of 21, the account will be immediately suspended and any Balance held within it will be frozen pending investigation. If the minor status of the account holder is confirmed, the account will be permanently closed and any winnings generated will be forfeited.

If you are a parent or guardian and believe that your child has registered an account with kf88, please contact our support team immediately at [email protected] so that the account can be identified and closed without delay.

21+ Only — kf88 does not permit access by persons under 21

The kf88 Platform may from time to time display references to third-party service names (such as payment provider brands or game studio names) for informational purposes. kf88 does not embed outbound links to third-party websites within the Platform's content pages.

Game content delivered via embedded frames from third-party studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others) is subject to the privacy practices of those studios in respect of any data those studios independently collect during gameplay. kf88 recommends that you review the privacy documentation of any third-party game provider if you have concerns about how they handle session-level data.

Payment service integrations (bKash, Nagad, Rocket, Upay, and card network gateways) involve redirection to or API communication with the relevant payment provider's systems. The privacy practices applicable to those interactions are governed by the payment provider's own privacy policy. kf88 accepts no responsibility for the data practices of third-party payment providers.

kf88 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or Platform functionality. When material changes are made to this Policy, kf88 will update the "Last Updated" date displayed at the top of this document and, where practicable, provide notice to registered players via the email address associated with their account or via a prominent notice on the Platform.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of those amendments. If you do not agree with any changes to this Policy, you must cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Policy periodically so that you remain informed about how kf88 collects, uses, and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kf88's processing of your personal data, please contact our support team through any of the following channels:

• Email: [email protected]
• WhatsApp: +880 1700 000 000
• Live Chat: Available 24/7 via the kf88 Platform — Bangladesh Standard Time (BST, UTC+6)

kf88 support operates in English around the clock and aims to acknowledge all privacy-related enquiries within two business days of receipt, and to resolve them within 30 calendar days unless the complexity of the request requires a longer handling period.

This Privacy Policy was last updated on 1 January 2026. Prior versions of this Policy are available on request. This document supersedes all previously published versions of the k f88 Privacy Policy.