kh999 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data kh999 collects, why we collect it, how it is used and protected, and what rights you have over your information as a player based in Bangladesh.
Our Commitments
How kh999 Protects Your Privacy
Before diving into the full legal text, here are the six core privacy commitments kh999 makes to every player on our platform.
SSL Encryption
All data transmitted between your device and kh999 servers is protected by industry-standard 256-bit SSL encryption. Your personal and financial information is never sent in plain text across any connection.
No Data Selling
kh999 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data exists on our platform to serve you — not to be monetised by external businesses.
Purpose Limitation
We collect only the data we genuinely need to operate your account, process transactions, and comply with anti-money laundering obligations. We do not collect data speculatively or beyond what is necessary for legitimate platform operations.
Secure Payment Data
kh999 never stores full bKash, Nagad, Rocket, Upay, or card credentials on our servers. Payment transactions are handled by encrypted payment gateways. Only the last four digits of a card or a masked mobile number are retained for reference.
Player Control
You have the right to access, correct, export, or request deletion of your personal data at any time. Requests are processed within 30 days via our support team at [email protected], subject to legal retention requirements.
AML Compliance
As an offshore gaming platform, kh999 applies internationally recognised anti-money laundering (AML) and Know Your Customer (KYC) standards. Certain data must be retained for defined periods to meet these obligations, even after account closure.
Section 1
Data We Collect
When you register for a kh999 account, interact with our platform, or contact our support team, kh999 collects certain categories of personal data. This section describes each category and the context in which it is collected. We collect only what is necessary and proportionate to the purposes described in Section 2.
1.1 Registration & Identity Data
When you create a kh999 account, we collect your full legal name, date of birth, email address, Bangladesh mobile number, and a chosen username. This information is required to create and identify your account, enforce our 18+ age restriction, and enable account recovery. We may also request your residential address in Bangladesh (city, district, and division) for identity verification purposes.
1.2 Identity Verification (KYC) Documents
To comply with our Know Your Customer obligations, we may request copies of government-issued identification documents such as your National ID Card (NID), Smart Card, or passport. We may also request a recent utility bill or bank statement as proof of address, and proof of ownership of the payment method you use (for example, a screenshot of a registered bKash or Nagad account in your name). These documents are stored securely and used solely for verification purposes.
Document Storage: KYC documents submitted to kh999 are stored in encrypted form on secured servers. Access is restricted to authorised compliance personnel only. Documents are retained for the period required by applicable AML standards, typically five years from the date of account closure, and are then securely destroyed.
1.3 Financial Transaction Data
We record the details of all deposits, withdrawals, and wagers on your account including transaction amounts in BDT, timestamps, payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard), and transaction reference numbers. We do not store full payment credentials. This data is used for account management, fraud prevention, AML monitoring, and dispute resolution.
1.4 Gameplay & Activity Data
We collect data about your activity on the kh999 platform including the games you play (slots, live casino, cricket betting, and others), bet amounts, session duration, win/loss history, and game provider identifiers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others). This data is used to operate your account, calculate balances, detect problem gambling patterns, and improve our platform.
1.5 Technical & Device Data
When you access kh999 from any device, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. We also collect session timestamps, page views, and clickstream data. This information helps us maintain platform security, detect unauthorised access, and understand how our platform is used.
1.6 Communications Data
If you contact our support team via live chat, email ([email protected]), or any other communication channel we make available, we retain a record of that communication including your message content, the date and time, and any resolution provided. This helps us maintain service quality and resolve disputes accurately.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Full name, date of birth, NID number | Account creation & KYC |
| Contact | Email address, Bangladesh mobile number | Account management |
| Financial | Transaction amounts, payment method type | Payments & AML |
| Gameplay | Bets placed, games played, session duration | Platform operation |
| Technical | IP address, device type, browser | Security & fraud prevention |
| Communications | Support chat logs, emails | Customer support |
Section 2
How We Use Your Data
kh999 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes incompatible with those described at the point of collection. The following are the primary purposes for which your data is processed:
2.1 Account Operation
Your identity and contact data is used to create and maintain your kh999 account, authenticate you when you log in, enforce single-account rules, and communicate essential account information such as verification confirmations, transaction receipts, and security alerts. Without this data, we cannot operate your account.
2.2 Payment Processing
Financial transaction data is used to process your deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card providers, and to process your withdrawal requests back to your verified payment method. Transaction records are maintained for reconciliation, dispute resolution, and anti-money laundering compliance. All account balances are denominated in Bangladeshi Taka (BDT).
2.3 Regulatory Compliance
kh999 applies internationally recognised AML and KYC standards. Your identity documents, financial transaction records, and account activity data are retained to meet these obligations. We may be required to share certain data with relevant authorities in the event of a formal investigation into suspected financial crime. We will notify you of any such disclosure where we are legally permitted to do so.
2.4 Responsible Gaming Monitoring
Your gameplay data, session duration, and deposit/withdrawal patterns are analysed to identify indicators of problem gambling behaviour. Where our systems or support team detect such indicators, we may proactively contact you to offer responsible gaming tools including deposit limits, loss limits, cooling-off periods, and self-exclusion. This processing is carried out in your legitimate interest and in fulfilment of our responsible gaming obligations.
2.5 Security & Fraud Prevention
Technical and device data including your IP address, device fingerprint, and login history is used to detect and prevent unauthorised account access, credential stuffing attacks, multi-accounting, bonus abuse, and other fraudulent activity. Automated risk scoring systems analyse login patterns and transaction behaviour to flag suspicious activity for manual review by our security team.
2.6 Marketing Communications
With your explicit consent provided during registration or subsequently updated in your account settings, we may send you promotional emails and SMS messages about kh999 bonuses, seasonal promotions (such as Eid, BPL cricket season, Pohela Boishakh offers), and new game launches. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing already carried out.
No Automated Decision-Making with Legal Effect: kh999 does not make decisions that produce significant legal effects on you (such as permanent account closure or fund seizure) based solely on automated processing. All automated flags are reviewed by a human member of our compliance or security team before any consequential action is taken.
2.7 Platform Improvement
Aggregated, anonymised gameplay and navigation data is used to improve the kh999 platform — for example, to optimise game loading times, improve the mobile experience for players in Dhaka, Chittagong, Sylhet, and other major Bangladeshi cities, and to identify underperforming features. This analysis uses data in aggregated form that cannot identify any individual player.
Section 3
Data Sharing & Third Parties
kh999 does not sell your personal data. We share your data only with third-party service providers who assist us in operating the kh999 platform, and only to the extent necessary for those specific purposes. All third-party processors are bound by data processing agreements that prohibit them from using your data for their own independent purposes.
3.1 Game Providers
To deliver our game library, kh999 integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and anonymised player identifier to launch game sessions. They do not receive your full name, contact details, or financial data. Game outcome data is returned to kh999 and recorded in your account history.
3.2 Payment Processors
To process your deposits and withdrawals, transaction data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, or Mastercard network processors). Each provider receives only the minimum data required to complete the transaction. All payment provider integrations use encrypted APIs. kh999 does not store full payment credentials on its own servers.
3.3 Identity Verification Services
kh999 may use third-party KYC verification services to assist in verifying your identity documents and confirming your age. These services receive copies of the documents you submit and return a verification status. They are contractually prohibited from retaining or independently using your documents beyond the verification process.
3.4 Analytics & Security Providers
We use third-party service providers for platform analytics, fraud detection, and cybersecurity monitoring. These providers process technical and device data (IP addresses, session data, behavioural signals) under our instruction and in accordance with data processing agreements. They do not receive directly identifying personal data such as your full name or NID number.
3.5 Legal Disclosures
kh999 may disclose your personal data to law enforcement, regulatory bodies, or other authorities when required by law, court order, or in connection with the prevention of financial crime. We will make such disclosures in good faith and limited to what is strictly required. Where legally permissible, we will inform you of any such disclosure.
International Data Transfers: Some of our third-party service providers operate servers outside of Bangladesh. Where your data is transferred internationally, kh999 ensures appropriate safeguards are in place, including contractual protections equivalent to internationally recognised data protection standards.
Section 5
Data Security & Retention
kh999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. No system is completely immune to risk, but we apply industry-standard protections appropriate to the sensitivity of the data we hold.
5.1 Technical Security Measures
All data in transit between your device and kh999 servers is protected by 256-bit SSL/TLS encryption. Data at rest — including account information and KYC documents stored on our servers — is encrypted using AES-256 encryption. Access to production databases is restricted to authorised personnel via multi-factor authentication. Our platform undergoes regular security assessments and vulnerability testing.
5.2 Organisational Measures
kh999 staff who have access to personal data are subject to confidentiality obligations. Access is granted on a least-privilege basis — employees see only the data necessary for their specific role. Our compliance and security teams conduct regular internal audits of data access logs. Any confirmed data breach affecting player personal data will be assessed, contained, and communicated to affected players without undue delay.
5.3 Data Retention Periods
We retain your personal data for as long as your kh999 account is active and for a defined period after account closure. The following retention schedule applies:
- Account and identity data: Retained for the duration of your account plus 5 years after closure, in line with AML retention standards.
- Financial transaction records: Retained for 5 years from the date of each transaction.
- KYC documents: Retained for 5 years from the date of account closure.
- Support communications: Retained for 2 years from the date of the last interaction.
- Technical and device logs: Retained for 12 months on a rolling basis.
- Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent.
After the applicable retention period expires, data is securely deleted or anonymised. Anonymised aggregated data may be retained indefinitely for statistical analysis.
Data Breach Notification: In the unlikely event of a data breach that poses a significant risk to your personal data, kh999 will notify affected players by email to their registered address as promptly as possible. Notifications will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps kh999 is taking to address it.
Section 6
Your Privacy Rights
kh999 respects your rights over your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 30 days. Some rights are subject to legal limitations — for example, we cannot delete data that we are legally required to retain for AML compliance.
6.1 Right of Access
You have the right to request a copy of the personal data kh999 holds about you. We will provide this in a commonly used, machine-readable format (such as CSV or JSON) upon request. Your first access request in any 12-month period is provided free of charge.
6.2 Right of Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your email address or mobile number) can be made directly in your account settings. For corrections to identity data (such as your legal name or date of birth), you may be required to submit supporting documentation.
6.3 Right to Erasure
You may request that kh999 delete your personal data. We will fulfil erasure requests where there is no overriding legal obligation to retain the data. Please note that financial transaction records and KYC documents must be retained for defined periods under AML compliance standards. In such cases, we will delete or anonymise all data not subject to legal retention requirements, and inform you of what data must be retained and why.
6.4 Right to Restrict Processing
In certain circumstances — for example, while a dispute about your account is under investigation — you may request that kh999 temporarily restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not process it for any purpose other than storage and the resolution of the relevant dispute.
6.5 Right to Object to Marketing
You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, update your notification preferences in your kh999 account settings or email [email protected] with the subject line "Marketing Opt-Out". Your request will be processed within 5 business days. Opting out of marketing does not affect your ability to use the platform or receive essential account communications.
6.6 Exercising Your Rights
To exercise any of the rights listed above, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your registered email address, account username, and a clear description of the right you wish to exercise. We may need to verify your identity before actioning your request to ensure the security of your account data.
Section 7
Children's Privacy
kh999 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes date-of-birth verification and our KYC process includes age confirmation via government-issued identification. Players who are found to be under 18 at any point will have their accounts immediately suspended, all gameplay activity voided, and any deposited funds returned to the original payment method after identity verification.
If you are a parent or guardian and have reason to believe that a person under 18 has created a kh999 account, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. We encourage parents and guardians to make use of parental control tools available for web browsers and mobile devices to restrict access to gambling platforms.
18+ Only: The kh999 platform is intended exclusively for adults aged 18 and above. Using this platform while under the age of 18 is a violation of our Terms and Conditions. If you are not yet 18, please do not attempt to register. For help with responsible gaming tools applicable to adults, visit our Responsible Gaming page.
Section 8
Policy Updates & Contact
kh999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal standards. The effective date at the top of this page will be updated whenever a new version is published. We encourage you to review this page periodically.
8.1 Notification of Material Changes
Where we make material changes to this Privacy Policy that significantly affect how we use your personal data, we will notify registered players by email to their registered address at least 14 days before the changes take effect. Your continued use of the kh999 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
8.2 Contact Our Privacy Team
If you have any questions, concerns, or complaints about this Privacy Policy or about how kh999 handles your personal data, please contact our privacy team directly:
- Email: [email protected]
- Subject Line: Privacy Policy Enquiry
- Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
- Support Hours: 24/7 — live chat and email
Governing Language: This Privacy Policy is written in English. In the event that a translated version is provided for convenience, the English version shall govern in all matters of interpretation. This policy applies to all kh999 players including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh.
Have Questions About Your Privacy?
Our support team is available 24/7 to answer any privacy-related questions about your kh999 account. Explore our platform, read our FAQ, or get in touch directly. 18+ only. Play responsibly.