Data Protection & Privacy
khela99
Privacy Policy
At khela99, the privacy and security of your personal data is a core commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and the rights you hold over your own data. We encourage all players to read this document in full before registering.
This Privacy Policy ("Policy") applies to all personal data processed by khela99 ("we", "us", "our") in connection with your use of the khela99 website, mobile interface, and all associated services. By registering an account or continuing to use khela99, you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue use of the platform immediately.
Our Privacy Commitments
How khela99 Protects Your Data
End-to-End SSL Encryption
All data transmitted between your device and khela99 is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never sent in plain text.
Secure Data Storage
Personal data is stored on access-controlled, encrypted servers. khela99 employs industry-standard database security practices including role-based access controls and regular security audits.
Minimal Data Collection
khela99 collects only the personal data that is strictly necessary to operate a safe, compliant, and functional gaming platform. We do not collect data for unrelated commercial purposes.
No Unauthorised Third-Party Sales
khela99 never sells, rents, or trades your personal data to third-party marketers or data brokers. Data is shared with partners only on a need-to-know basis to deliver platform services.
Player-Controlled Preferences
You control your marketing consent, cookie preferences, and communication settings from your khela99 account dashboard at any time. Opt-out requests are honoured within 48 hours.
Transparent Data Practices
Every category of data we collect, every purpose for which it is used, and every party with whom it may be shared is disclosed in full in this Privacy Policy. No hidden data practices.
Section 1
Information We Collect
To deliver a secure, compliant, and personalised gaming experience on khela99, we collect personal data across several categories. The data we collect depends on how you interact with the platform — some is provided directly by you during registration or account management, some is collected automatically as you use the service, and some is received from trusted third-party partners involved in delivering platform functions.
1.1 Registration & Account Data
When you create an account on khela99, we collect the following information:
- Full legal name (as it appears on your government-issued identity document).
- Date of birth (to verify that you meet the 18+ age requirement).
- Email address (used for account communications and security alerts).
- Bangladesh mobile phone number (used for SMS verification and two-factor authentication).
- Residential address (city, district, and postal code — required for KYC compliance).
- Username and encrypted password (we never store passwords in plain text).
- Preferred currency (Bangladeshi Taka, BDT) and preferred payment method.
1.2 Identity Verification (KYC) Data
Before processing your first withdrawal, khela99 is required to verify your identity. For this purpose, we collect copies or scans of the following documents:
- A government-issued photo identity document — Bangladesh National Identity Card (NID), passport, or driving licence.
- Proof of address where required — a utility bill, bank statement, or official correspondence issued within the last three months, showing your name and address.
- Proof of payment method ownership — a screenshot or confirmation from your bKash, Nagad, Rocket, or Upay wallet confirming the account is registered in your name.
- A selfie or live photo alongside your identity document, if requested by our compliance team during enhanced due-diligence checks.
KYC documents are handled with the highest level of care and are accessible only to authorised members of the khela99 compliance team. They are stored in encrypted format and retained only for as long as required by applicable law or internal policy.
1.3 Transaction & Financial Data
To process deposits and withdrawals, khela99 records the following financial data:
- Deposit amounts, timestamps, and payment method identifiers (e.g., bKash wallet number — last four digits only; full numbers are not stored on khela99 servers).
- Withdrawal requests, amounts, destination payment method, and processing status.
- Account balance history, bonus credits, and wagering progression records.
- Betting history — markets wagered on, stake amounts, odds accepted, and settlement outcomes.
1.4 Technical & Usage Data
When you access khela99 through a browser or mobile device, we automatically collect certain technical information, including:
- IP address and approximate geolocation (country and city level — not precise GPS coordinates).
- Device type, operating system, browser type, and browser version.
- Pages visited, session duration, click-path data, and feature usage patterns.
- Login timestamps and session identifiers.
- Referral source (the URL or channel through which you arrived at khela99, if applicable).
1.5 Communication Data
If you contact the khela99 support team via live chat, email, or any other channel, we retain a record of your communications, including the content of your messages, the channel used, the date and time, and the resolution outcome. These records are used to resolve disputes, improve support quality, and comply with record-keeping obligations.
Section 2
How We Use Your Data
khela99 uses personal data for clearly defined, lawful purposes only. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process personal data are set out below, together with the legal basis for each processing activity.
| Purpose of Processing | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and authentication | Registration data, technical data | Contractual necessity |
| Identity verification (KYC / AML) | KYC documents, registration data | Legal obligation |
| Processing deposits and withdrawals | Financial data, KYC data | Contractual necessity |
| Fraud detection and prevention | Technical data, financial data, usage data | Legitimate interest |
| Responsible gaming monitoring | Betting history, financial data, session data | Legal obligation / legitimate interest |
| Customer support and dispute resolution | Communication data, account data | Contractual necessity / legitimate interest |
| Promotional communications (where consented) | Registration data, betting preferences | Consent |
| Platform analytics and improvement | Technical data, usage data | Legitimate interest |
2.1 Marketing Communications
khela99 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, seasonal offers (such as Eid, Pohela Boishakh, or BPL season promotions), and new game releases — but only if you have given your explicit consent to receive such communications at the point of registration or subsequently through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting support@khela99. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal. Transactional and security-related account communications (such as deposit confirmations, withdrawal notifications, and password reset emails) are not subject to marketing consent and will continue to be sent regardless of your marketing preferences.
2.2 Responsible Gaming Use
khela99 is committed to player welfare. We use betting history, session data, deposit frequency, and account activity patterns as part of our responsible gaming monitoring programme. Where our system detects indicators that a player may be experiencing difficulties with gambling, a member of the khela99 responsible gaming team may contact you directly to offer support, information, and access to self-help tools. This processing is carried out in your best interests and constitutes a legitimate interest that we consider overrides any privacy interest in this specific context.
Section 3
Data Sharing & Disclosure
khela99 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any party whose primary purpose is commercial data monetisation. Data is shared with external parties only where it is strictly necessary to operate the platform, fulfil a legal obligation, or protect against fraud.
There are specific, limited circumstances in which khela99 may share your personal data with third parties. In every case, data sharing is governed by written data processing agreements that bind recipients to confidentiality, security, and purpose-limitation obligations at least equivalent to those applied by khela99 itself.
3.1 Payment Service Providers
To process your deposits and withdrawals, khela99 shares necessary transaction data with the payment service providers you use — including bKash, Nagad, Rocket, Upay, and card processing partners for Visa and Mastercard transactions. The data shared is limited to what is required to execute and verify the transaction (such as transaction reference numbers and amounts). We do not share your full identity documents with payment providers.
3.2 Game Providers
Casino games on khela99 are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, your account session token and a pseudonymous player identifier are shared with the game server to authenticate your session and record game results. Your full name, payment details, and identity documents are not shared with game providers.
3.3 Legal and Regulatory Disclosure
khela99 may be required by applicable law, court order, or a regulatory or law enforcement authority to disclose personal data relating to specific accounts or transactions. In such cases, khela99 will comply with lawful disclosure requests and will, where legally permitted to do so, notify the affected player of the disclosure.
3.4 Anti-Money Laundering (AML) Obligations
As part of its AML compliance programme, khela99 may be required to file reports with applicable financial intelligence units where transactions or account activity are flagged as suspicious. Such reports are filed in strict confidence and in accordance with applicable AML law. khela99 is legally prohibited from disclosing to a player that an AML report has been filed in respect of their account — this is sometimes referred to as a "tipping-off" restriction.
3.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the khela99 business, personal data held by khela99 may be transferred to the acquiring entity as part of the transaction. In such an event, khela99 will provide advance notice to affected players and ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this Policy.
Section 4
Cookies & Tracking Technologies
khela99 uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the platform, maintain your login session, remember your preferences, and analyse platform usage. This section explains what types of cookies we use and how you can manage them.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain login session, load balancing, security tokens, fraud prevention | Session / up to 24 hours |
| Functional | Remember language preference, display settings, last-visited game category | Up to 30 days |
| Analytics | Measure page views, session duration, navigation paths, feature engagement | Up to 13 months |
| Marketing (with consent) | Track referral source, measure campaign effectiveness, personalise bonus offers | Up to 30 days |
4.1 Managing Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential to the functioning of the khela99 platform. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling functional or analytics cookies may affect the quality of your experience on khela99. Instructions for managing cookies in major browsers are available in each browser's own help documentation.
4.2 Do Not Track
Some browsers transmit a "Do Not Track" (DNT) signal to websites. At present, there is no universally accepted technical standard for how websites should respond to DNT signals. khela99 does not currently alter its data collection practices in response to browser DNT signals, but we are committed to reviewing this position as industry standards evolve.
Section 5
Data Retention & Deletion
khela99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:
- Account registration data and KYC documents: retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering record-keeping requirements.
- Transaction and financial records: retained for a minimum of five (5) years from the date of each transaction.
- Betting history: retained for a minimum of three (3) years from the date of each wager, and longer where required for dispute resolution or regulatory purposes.
- Support communication records: retained for two (2) years from the date of the final communication in each support interaction, and longer where the interaction relates to an unresolved dispute.
- Technical and usage data (including analytics data): retained for a maximum of thirteen (13) months from the date of collection, after which it is aggregated and anonymised.
- Marketing consent records: retained for the duration of your account and for three (3) years after account closure, to demonstrate compliance with consent obligations.
5.1 Account Deletion Requests
You may request deletion of your khela99 account and associated personal data at any time by emailing support@khela99 with the subject line "Data Deletion Request". Upon receipt of a verified deletion request, khela99 will close your account and delete or anonymise personal data that is not subject to a mandatory retention obligation within thirty (30) calendar days. Data subject to legal retention requirements (such as KYC documents and financial records) will be retained for the applicable statutory period and then permanently deleted. We will confirm the outcome of your deletion request in writing within the 30-day window.
Section 6
Data Security Measures
khela99 employs a multi-layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a regular basis to address evolving threats. Key security measures in place include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and khela99 servers — look for the padlock icon in your browser address bar.
- Encryption at rest for sensitive personal data fields including identity document scans, payment method identifiers, and KYC records.
- Role-based access controls ensuring that personal data is accessible only to authorised khela99 staff whose job function requires it.
- Regular internal security audits and vulnerability assessments conducted on platform infrastructure.
- Secure password storage using industry-standard one-way hashing algorithms — plain-text passwords are never stored or logged anywhere in the khela99 system.
- Automated fraud and anomaly detection systems that flag unusual account activity — such as login attempts from new devices or multiple failed authentication attempts — and trigger protective account locks.
- Staff data protection training conducted on a regular basis, covering phishing awareness, secure data handling, and incident response procedures.
6.1 Data Breach Response
In the event of a personal data breach that poses a risk to your rights and interests, khela99 will notify affected players by email without undue delay and within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed by khela99 to address the breach and mitigate its effects. If you believe your khela99 account has been compromised, contact support@khela99 immediately so that protective measures can be applied without delay.
Section 7
Your Privacy Rights
As a player on khela99, you hold a number of rights in relation to the personal data we hold about you. khela99 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, contact support@khela99 with the subject line "Privacy Rights Request" and include your full name and registered email address so that we can verify your identity before processing the request.
Right of Access
You have the right to request a copy of the personal data khela99 holds about you. We will provide this in a structured, readable format within 30 calendar days of receiving a verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly from your account settings page.
Right to Erasure
Subject to legal retention obligations, you may request deletion of your personal data. See Section 5.1 for details on how deletion requests are processed and the timelines that apply.
Right to Object
You may object to the processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring and platform analytics.
7.1 Response Timelines
khela99 will acknowledge all privacy rights requests within five (5) business days of receipt and will fulfil verified requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days and will notify you of the extension and the reason for it within the initial 30-day window. Privacy rights requests are handled free of charge. If requests are manifestly unfounded or excessive, khela99 reserves the right to charge a reasonable administrative fee or decline to process the request, with written reasons provided.
Section 8
Policy Updates & Contact
khela99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or feedback from players and regulators. When material changes are made — particularly those that affect your rights or introduce new categories of data processing — we will notify registered players by email at least seven (7) calendar days before the revised Policy takes effect. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of khela99 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this Policy periodically. The current version is always available at /privacy-policy. Prior versions of this Policy are available on request by contacting support@khela99.
8.1 How to Contact Us About Privacy
For all privacy-related queries, data rights requests, concerns about how your personal data is being handled, or to report a suspected data security incident, please contact the khela99 Data Protection team using the details below. Our team is available 24 hours a day, 7 days a week, in both English and Bengali.
Data Protection Team — khela99
Support email: support@khela99
Subject line for privacy matters: "Privacy Rights Request" or "Data Deletion Request"
Response time: within 5 business days of receipt. Available 24/7 in English and Bengali.
khela99 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults (18+). If you have reason to believe that a person under 18 has registered on khela99 or has had personal data collected by us, please contact support@khela99 immediately. Upon confirmation, we will delete the relevant data and close the account without delay.
Your Privacy Is Protected. Start Playing.
Now that you understand how khela99 safeguards your data, explore our full range of cricket betting, live casino games, and 500+ slots — with fast bKash and Nagad payments. 18+ only. Play responsibly.