khv8 Privacy Policy

khv8 is committed to protecting the privacy and personal data of every player who uses its online betting and casino platform. This Privacy Policy sets out in clear, plain English exactly what personal data khv8 collects from players in Bangladesh and internationally, the purposes for which that data is used, the legal basis on which it is processed, who it may be shared with, how long it is retained, and the rights that players have in relation to their personal data.

khv8 acts as the data controller in respect of the personal data it collects directly from players through the registration process, ongoing platform use, and customer support interactions. Where khv8 engages third-party service providers to process data on its behalf — such as identity verification agencies, payment processors, and fraud detection services — those providers act as data processors under contract with khv8 and are bound by strict data protection obligations.

This policy applies to all personal data collected through the khv8 website at khv8.io, including any mobile-optimised version of the platform. It does not apply to third-party websites or services that may be linked from the platform — players should review the privacy policies of those services independently.

khv8 collects the following categories of personal data from players. The data collected depends on the nature of the interaction — some data is provided directly by the player, while other data is collected automatically during platform use.

Identity & Registration Data:

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify that the player is aged 21 or above)
• Residential address, including city, district, and postcode
• Email address (used for account communication and verification)
• Mobile phone number (used for account security and support)
• Username and hashed password (the password itself is never stored in plain text)

Identity Verification Data:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or government letter dated within 3 months)
• Selfie or live photo for biometric identity matching, where required by our verification partner
• Proof of payment method ownership (e.g., screenshot of bKash/Nagad account showing registered mobile number)

Financial & Transaction Data:

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used
• Mobile wallet identifiers (e.g., the mobile number associated with a bKash or Nagad account) — wallet PINs are never collected
• Bank account details provided for bank transfer withdrawals
• Transaction reference numbers and payment gateway responses

Betting & Gaming Activity Data:

• Complete betting and wagering history, including bet amounts, selections, odds, and outcomes
• Casino game session data, including game title, session duration, bets placed, and results
• Bonus and promotion usage history
• Responsible gaming tool settings, including deposit limits, session limits, and self-exclusion records

Technical & Device Data:

• IP address at time of registration, login, and key account actions
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 6 for full cookie information)
• Platform access timestamps and session duration logs

Customer Support Data:

• Records of all live chat conversations, email correspondence, and WhatsApp messages between the player and khv8 support
• Any documents or screenshots voluntarily shared by the player during a support interaction

khv8 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide directly when completing the registration form, submitting identity verification documents, making deposits or withdrawals, updating account settings, or contacting the khv8 support team.
• Automated Collection: Technical data — including IP address, device information, browser type, and session logs — is collected automatically when you access the khv8 platform, regardless of whether you are logged in to an account.
• Cookies & Tracking Technologies: khv8 uses cookies, pixel tags, and similar technologies to collect data about how players interact with the platform. Details of the cookies used and how to manage your cookie preferences are set out in Section 6 of this policy.
• Third-Party Verification Partners: When you submit identity verification documents, khv8's verification partner may return additional data derived from the document matching and biometric comparison process. This data is used solely for the purpose of verifying your identity.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, the relevant payment processor shares transaction confirmation data with khv8. This data is used to reconcile your account balance and maintain accurate transaction records.
• Fraud Detection Services: khv8 uses automated fraud detection tools that analyse patterns in registration data, login behaviour, and transaction activity to identify and prevent fraudulent activity on the platform.

khv8 processes personal data only where there is a clear, lawful basis for doing so. The table below sets out the primary purposes for which your data is processed, the categories of data used for each purpose, and the legal basis on which that processing takes place.

Where khv8 relies on legitimate interests as the legal basis for processing, we have assessed that our interests in fraud prevention, platform security, and service improvement do not override the fundamental rights and freedoms of players, and that players would reasonably expect such processing to occur in the context of an online gaming platform.

Where processing is based on consent — specifically in relation to marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect your ability to use the khv8 platform.

khv8 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Personal data is shared only in the following limited, necessary circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive the minimum transaction data required to process your deposit or withdrawal. These providers are contractually bound to use the data only for transaction processing purposes.
• Identity Verification Providers: Your identity documents and biometric data may be shared with our third-party Know Your Customer (KYC) verification partner for the purpose of verifying your identity and age. This partner operates under strict data processing agreements and does not retain your documents beyond the period required for verification.
• Fraud Detection & AML Services: Anonymised or pseudonymised behavioural and transaction data may be shared with fraud detection and anti-money laundering compliance services to detect and prevent fraudulent activity on the platform.
• Regulatory & Law Enforcement Authorities: khv8 may be required by law, court order, or lawful authority to disclose personal data to regulatory bodies, law enforcement agencies, or other government authorities. Such disclosures will be made only to the extent strictly required by the applicable legal obligation, and where permitted by law, khv8 will notify the affected player.
• Business Transfers: In the event that khv8 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and of any changes to their data protection rights that may result.

The khv8 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to enhance the player experience, and to collect analytics data that helps us understand how the platform is used and how it can be improved.

The following categories of cookies are used on the khv8 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, and ensure that security features operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and responsible gaming tool configurations — so that you do not have to re-enter them on each visit.
• Analytics Cookies: These cookies collect anonymised data about how players navigate and interact with the platform. This data is used in aggregate form to identify usability issues and improve the platform experience. No individually identifiable data is retained through analytics cookies.
• Fraud Prevention Cookies: These cookies support our fraud detection systems by recording device fingerprint data and flagging unusual session patterns. They are a core component of our platform security infrastructure.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to or using the khv8 platform. Instructions for managing cookies in popular browsers are available on the respective browser's support pages.

khv8 does not use cookies to deliver third-party advertising or to track your activity on websites other than khv8.io.

khv8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory retention obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised or aggregated data derived from player activity may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

As a player whose personal data is processed by khv8, you have the following rights in relation to your data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request – [Your Username]". khv8 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that khv8 holds about you, along with information about how it is used and who it has been shared with.
• Right to Rectification: If any personal data held by khv8 about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections — such as changes to your registered name or date of birth — may require documentary evidence before they can be processed.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to khv8's legal and regulatory data retention obligations — data that must be retained for AML, KYC, or financial records purposes cannot be erased at your request.
• Right to Restriction of Processing: In certain circumstances — such as while the accuracy of your data is being contested, or while a complaint is being investigated — you may request that khv8 restrict the processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where khv8 relies on legitimate interests as the legal basis. khv8 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — specifically marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

khv8 places special emphasis on the security and privacy of financial data. The following specific rules apply to the processing of payment-related personal data on the khv8 platform:

• khv8 does not store full card numbers (PANs), card CVV codes, card expiry dates, or any other raw card credential data on its own servers. Card payments are processed exclusively through a PCI-DSS Level 1 compliant payment gateway.
• khv8 does not store bKash, Nagad, Rocket, or Upay account PINs or passwords. The only mobile wallet data stored by khv8 is the mobile number associated with the wallet account, which is used for transaction reconciliation and payment method verification purposes.
• Bank account details provided for bank transfer withdrawals are stored in encrypted form and are used solely for the purpose of processing the specific withdrawal to which they relate. They are not used for any other purpose without your explicit consent.
• All payment transaction records — including deposit amounts, withdrawal amounts, timestamps, payment method used, and transaction reference numbers — are retained for a minimum of 7 years in accordance with financial records retention obligations.

The khv8 platform is strictly intended for adults aged 21 years and above. khv8 does not knowingly collect, process, or store personal data from any individual under the age of 21. The collection of date of birth data during registration, and the mandatory identity verification process, are both designed to enforce this age restriction.

If khv8 discovers or has reason to believe that an account has been registered by or is being used by an individual under the age of 21, that account will be suspended immediately pending investigation. Any funds deposited by an underage player will be reviewed in accordance with khv8's Terms & Conditions, and the account will be permanently closed upon confirmation of the age violation.

Parents and guardians are strongly encouraged to make use of parental control software to prevent underage individuals from accessing online gambling platforms. If you believe that a minor has registered an account on the khv8 platform, please contact [email protected] immediately with the subject line "Underage Account Report". All such reports are treated with the highest priority and complete confidentiality.

khv8 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the khv8 platform is encrypted using TLS 1.2 or higher. The khv8 website operates exclusively over HTTPS, and any attempt to access the platform over an unencrypted HTTP connection is automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and account credentials — is stored in encrypted form on khv8's servers using industry-standard encryption algorithms. Encryption keys are managed through a secure key management system with strict access controls.
• Access Controls: Access to personal data within khv8's systems is restricted on a strict need-to-know basis. All internal data access requires authenticated, role-based access credentials. Access to particularly sensitive data categories — such as identity documents and financial records — requires elevated authorisation and is subject to enhanced audit logging.
• Password Security: Player passwords are stored exclusively as salted cryptographic hashes. The plain-text password is never stored or logged anywhere in khv8's systems. Players are encouraged to use strong, unique passwords and to enable two-factor authentication where available.
• Intrusion Detection & Monitoring: khv8's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Automated alerts notify the security team of anomalous activity in real time.
• Penetration Testing: khv8 conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All khv8 personnel who handle personal data receive regular data protection and security awareness training. Confidentiality obligations are embedded in employment contracts and enforced through disciplinary procedures.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, khv8 will notify those players without undue delay and will take all reasonable steps to contain and mitigate the breach.

The khv8 platform integrates with a number of third-party service providers whose technology is necessary for the platform to operate. The following categories of third-party service are used, together with an explanation of how personal data flows to and from each:

• Game Providers: khv8 sources its casino and sports betting content from licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, your game session data — including bets placed and results — is transmitted to the provider's servers for game processing purposes. Game providers are contractually prohibited from using this data for any purpose other than game delivery and integrity verification.
• Payment Gateways: Deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer are processed through payment gateway providers. These providers receive the minimum transaction data necessary to process the payment and return a confirmation to khv8. They are independently regulated financial services entities with their own privacy policies.
• KYC & Identity Verification: khv8 uses a third-party KYC provider to verify the identity and age of players during the account verification process. This provider processes identity document images and, where applicable, biometric comparison data. The provider is contractually bound to process this data only for verification purposes and to retain it only for the minimum period required.
• Analytics Providers: Anonymised, aggregated platform usage data may be processed by third-party web analytics tools to help khv8 understand traffic patterns and improve platform performance. No personally identifiable data is included in analytics data sets.
• Customer Support Tools: Live chat and support ticketing functionality may be provided by a third-party customer support platform. Support conversations are stored within that platform's infrastructure, subject to a data processing agreement with khv8.

The khv8 platform may contain links to third-party websites — for example, links to game provider information pages. khv8 is not responsible for the privacy practices of those third-party websites and encourages players to review the privacy policies of any external site they visit.

khv8 may send promotional communications — including information about bonuses, promotions, new game launches, and seasonal offers — to players who have opted in to receive such communications at the time of registration or subsequently through their account settings.

Marketing communications from khv8 may be delivered via the following channels, subject to your consent preferences:

• Email newsletters and promotional emails to your registered email address
• SMS messages to your registered mobile number
• WhatsApp messages to your registered mobile number (between 08:00 and 00:00 BST)
• On-platform notifications displayed when you are logged in to your khv8 account

You may opt out of any or all marketing communication channels at any time by:

• Updating your communication preferences in your khv8 account settings
• Clicking the "Unsubscribe" link in any marketing email sent by khv8
• Sending an opt-out request to [email protected] with the subject line "Marketing Opt-Out – [Your Username]"

Opting out of marketing communications will not affect your ability to receive transactional communications from khv8 — such as deposit confirmations, withdrawal notifications, account security alerts, and identity verification requests. These transactional communications are necessary for the operation of your account and cannot be disabled while your account remains active.

khv8 does not share your personal data with third-party advertisers for the purpose of delivering advertising to you on other platforms or websites. All marketing communications come directly from khv8 and relate exclusively to khv8 products and services.

khv8 reserves the right to update or amend this Privacy Policy at any time. Any material changes — including changes to the categories of data collected, the purposes for which data is processed, or the rights available to players — will be communicated to registered players via email notification to their registered email address and via a prominent notice on the khv8 platform, no less than 14 days before the amended policy takes effect.

Non-material changes — such as corrections to typographical errors, clarifications of existing practices, or updates to contact details — may be made without advance notice and will take effect immediately upon publication on the khv8 website. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.

Your continued use of the khv8 platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting [email protected]. The current version of this Privacy Policy is always available at khv8.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern or complaint about the way khv8 has handled your personal data, please contact the khv8 data protection team through any of the following channels:

• Email: [email protected] — subject line "Privacy Query – [Your Username]" for general queries, or "Data Rights Request – [Your Username]" for formal rights requests
• Live Chat: Available 24/7 via the khv8 platform — ask to speak to the data protection team
• WhatsApp: Available 08:00–00:00 BST for general support queries relating to this policy

khv8 is committed to resolving all privacy queries and complaints fairly and promptly. Formal complaints will be acknowledged within 5 business days and will receive a substantive written response within 30 calendar days. Where a complaint is particularly complex or requires investigation, khv8 will keep you informed of progress at regular intervals.

If you are not satisfied with khv8's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. khv8 will cooperate fully with any investigation conducted by a competent supervisory authority.