kala888 Privacy Policy

When you register, use, or interact with kala888, we may collect the following categories of personal information:

Identity & Contact Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (collected to verify that you are aged 18 or above).
• Residential address in Bangladesh (city, district, postal code).
• Mobile phone number registered with your account.
• Email address used at registration.

Identity Verification (KYC) Documents

To comply with Know Your Customer (KYC) obligations and protect the integrity of the platform, we may request copies of:

• Bangladesh National Identity Card (NID) — front and back.
• Passport (bio-data page).
• Proof of address document (utility bill, bank statement, or similar) dated within the past 3 months.
• Screenshot or confirmation of the mobile wallet (bKash, Nagad, Rocket, or Upay) registered to your account, to verify payment method ownership.

Financial Transaction Data

We record all deposits and withdrawals made through your kala888 account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), and transaction reference numbers. We do not store full card numbers or mobile banking PINs on our servers — payment processing is handled by the respective payment provider.

Gameplay & Betting Activity

We retain a record of all games played, bets placed, wagers settled, bonus claims, and promotional activity associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

Technical & Device Data

When you access kala888, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and session duration. This data is used for platform security, fraud detection, and aggregate analytics — it is not used to personally profile you for advertising purposes.

Communications Data

If you contact our support team via live chat or email at support@kala888, we retain a record of that correspondence, including the content of messages and any attachments you provide. This data is used to resolve your query and improve our support quality.

kala888 processes your personal data only for the purposes listed below. We rely on one or more of the following lawful bases for each processing activity: performance of a contract (operating your account), compliance with a legal obligation (KYC and anti-money-laundering requirements), legitimate interest (fraud prevention, platform security), and consent (optional marketing communications, where applicable).

Purpose	Data Used	Lawful Basis
Account registration & management	Name, email, mobile, date of birth, address	Contract performance
Age & identity verification (KYC)	NID / passport, proof of address	Legal obligation
Payment processing & withdrawal	Transaction data, payment method reference	Contract performance
Fraud prevention & security	IP address, device data, betting patterns	Legitimate interest
Responsible gaming monitoring	Gameplay activity, deposit history	Legal obligation / legitimate interest
Customer support	Communications data, account history	Contract performance
Platform analytics & improvement	Aggregated technical & usage data	Legitimate interest
Promotional communications (opt-in only)	Email, mobile number	Consent

Marketing Communications

kala888 may send you promotional offers, bonus notifications, and platform updates via email or SMS only if you have opted in to receive such communications during registration or via your account settings. You may withdraw consent and unsubscribe from marketing communications at any time by contacting support@kala888 or updating your notification preferences in the account dashboard. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to that withdrawal, nor does it affect the processing of operational communications (e.g., account security alerts, withdrawal confirmations) which are sent on the basis of contract performance.

In the course of operating kala888, we may share specific categories of your personal data with the following third parties, each of whom is required to handle your data securely and in accordance with applicable privacy standards:

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these providers operates under its own privacy policy and data handling standards. kala888 is not responsible for the data practices of external payment providers, but we only partner with established, reputable services used widely in Bangladesh.

Game Content Providers

Casino games available on kala888 are provided by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive a player session token to authenticate your game session. They do not receive your full personal profile, NID details, or payment information. Game session data (game ID, bet amount, outcome) is shared solely for game operation and dispute resolution purposes.

Identity Verification Services

Where automated identity verification tools are used as part of the KYC process, your name, date of birth, and document image may be shared with our verification partner. All such partners are contractually bound to use your data solely for identity verification and to delete it once the verification process is complete.

Legal & Regulatory Disclosure

kala888 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure to the extent permitted by law.

Business Transfers

In the event that kala888 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such change and the acquiring entity will be required to honour the terms of this Privacy Policy.

kala888 uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly, to keep your session active while you are logged in, and to gather aggregate usage statistics that help us improve the player experience.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential	Maintain login session, security tokens, language preference	Session / up to 30 days
Functional	Remember display preferences, game lobby settings, last-visited category	Up to 90 days
Analytics	Aggregate page-view counts, feature usage, error logging (no personal profiles)	Up to 12 months

What We Do Not Use Cookies For

• Building personal advertising profiles or behavioural marketing segments.
• Sharing browsing data with social media networks or ad exchanges.
• Cross-site tracking of your activity outside the kala888 domain.

Managing Cookies

Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling essential cookies will prevent the kala888 platform from functioning correctly — in particular, you will not be able to maintain a logged-in session. Disabling functional or analytics cookies will not affect your ability to play games or make transactions, but may reduce the quality of certain platform features.

kala888 retains your personal data for as long as your account remains active and for a defined period after account closure, in order to fulfil legal obligations, resolve disputes, and prevent fraud. The retention periods we apply to each category of data are set out below.

Data Category	Retention Period	Reason
Account profile & identity data	Duration of account + 5 years post-closure	Legal obligation, fraud prevention
KYC documents	Duration of account + 5 years post-closure	Regulatory compliance
Transaction records	Duration of account + 7 years post-closure	Financial record-keeping obligations
Gameplay & betting history	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming audit
Support communications	3 years from date of communication	Service quality, dispute reference
Technical / device log data	Up to 12 months on a rolling basis	Security monitoring, fraud detection
Marketing consent records	Until consent is withdrawn + 2 years	Compliance with consent obligations

Once a retention period expires, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data (with no link to any individual) may be retained indefinitely for statistical and platform improvement purposes.

Data Storage Location

kala888 stores player data on secure servers. Where data is processed or stored by a third-party service provider outside Bangladesh, we ensure that adequate contractual protections are in place requiring the recipient to maintain data security standards consistent with this Privacy Policy.

As a player on kala888, you have the following rights in relation to your personal data. These rights apply regardless of where you are located in Bangladesh — whether in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar.

• Right of Access: You may request a copy of the personal data kala888 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that erasure requests may be declined where retention is required by law (e.g., financial transaction records).
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data — for example, while you are contesting the accuracy of information we hold.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest, including any profiling carried out for fraud prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

kala888 will not discriminate against you for exercising any of these rights. We will not restrict your account access, reduce the quality of service, or penalise you in any way for making a legitimate data rights request. Where a request is complex or involves a large volume of data, we may extend our response window by up to an additional 20 business days, in which case we will notify you of the extension and the reason for it.

kala888 implements a layered approach to data security, combining technical controls, organisational procedures, and ongoing monitoring to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

Technical Safeguards

• 128-bit SSL/TLS encryption on all data transmitted between your browser or app and our servers.
• Encrypted storage for sensitive data fields including KYC document images, payment references, and account credentials.
• Firewalls and intrusion detection systems that monitor network traffic and alert our security team to anomalous activity in real time.
• Regular penetration testing and vulnerability assessments carried out by qualified security professionals.
• Multi-factor authentication for internal staff accessing player data management systems.

Organisational Controls

• Access to personally identifiable player data is restricted to authorised staff with a documented operational need.
• All team members with data access undergo privacy and data security training at onboarding and on an annual basis.
• Access logs for player data systems are retained and reviewed regularly to detect any unauthorised access attempts.
• Third-party service providers who process data on our behalf are assessed for security compliance before onboarding and are contractually required to maintain appropriate safeguards.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights, kala888 will notify affected players without undue delay and, where required, report the breach to the relevant authorities. Notification will include a description of the nature of the breach, the categories of data involved, the likely consequences, and the steps we have taken or propose to take to address the breach and prevent recurrence.

Your Role in Security

Data security is a shared responsibility. We strongly encourage you to use a unique, strong password for your kala888 account, to enable any available two-step login verification, to log out of your account when using shared or public devices, and to contact support@kala888 immediately if you believe your account credentials have been compromised.

kala888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When a material change is made, we will update the effective date displayed at the top of this page and, where the change significantly affects how we process your data, we will notify registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically so that you remain informed about how kala888 protects your data. Your continued use of the platform after a policy update has been published constitutes acceptance of the revised terms, to the extent permitted by applicable law.

Children's Privacy

kala888 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has submitted personal data to our platform, we will delete that data and close the associated account promptly. If you believe a minor may have accessed or registered on kala888, please contact us immediately at support@kala888.

Contact Our Privacy Team

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the kala888 support team:

• Email: support@kala888 (plain text — not a clickable link)
• Live Chat: Available 24/7 via your account dashboard
• Response Time: Within 10 business days for data rights requests (Bangladesh Standard Time, UTC+6)

This Privacy Policy is governed by and construed in accordance with applicable data protection principles. The English-language version of this document is the authoritative reference. Any informal translation provided for convenience does not supersede the English original.