🛡
Data Protection & Privacy

kh333 Privacy Policy — Your Data, Our Responsibility

At kh333, protecting the personal data of every player across Bangladesh is a core obligation — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold over your own information on the kh333.io platform.

Effective: 1 January 2026 256-bit SSL Encrypted Language: English Market: Bangladesh

How kh333 Safeguards Your Privacy

Six core privacy principles that underpin every data decision made at kh333. Full details are set out in the policy document below.

🔒
End-to-End Encryption

All data transmitted between your device and kh333.io is protected by 256-bit SSL/TLS encryption. Sensitive information such as payment details and identity documents is encrypted both in transit and at rest, ensuring it cannot be intercepted or read by unauthorised parties.

🚫
No Data Sales to Third Parties

kh333 does not sell, rent or trade your personal data to third-party marketers under any circumstances. Data shared with service providers — such as payment processors and identity verification partners — is strictly limited to what is necessary to operate the platform and deliver your requested services.

🎯
Purpose-Limited Collection

kh333 only collects personal data that is directly necessary for account registration, identity verification, payment processing, fraud prevention, responsible gaming compliance, and customer support. We do not harvest data beyond these defined and disclosed purposes.

📋
Your Rights Over Your Data

Registered kh333 players hold meaningful rights over their personal data, including the right to access a copy of the data held, request corrections, request erasure (subject to legal retention obligations), and withdraw consent for non-essential processing. To exercise any of these rights, contact [email protected].

🕵️
AML & Fraud Screening

As part of our legal obligations, kh333 processes certain account and transaction data through automated anti-money laundering (AML) and fraud detection systems. This processing is required by applicable law and forms part of our commitment to maintaining a safe and compliant platform for all players in Bangladesh.

🗓️
Clear Retention Limits

kh333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory retention obligations. Once the retention period has elapsed, data is securely deleted or anonymised in accordance with our internal data governance procedures.

This Privacy Policy governs the collection, processing and storage of personal data by kh333 in connection with the kh333.io platform. By creating an account or using the kh333 platform, you confirm that you have read and understood this Privacy Policy. Please read it carefully alongside the Terms & Conditions.
Table of Contents

kh333 operates the online betting and casino platform accessible at kh333.io (the "Platform"). For the purposes of this Privacy Policy, kh333 acts as the data controller in respect of the personal data of all registered players and platform visitors. As data controller, kh333 determines the purposes and means by which your personal data is processed.

kh333 is committed to handling personal data transparently, lawfully and in accordance with applicable data protection obligations. The Platform is directed primarily at players located in Bangladesh, and our data practices are designed to reflect the expectations and legal requirements applicable to that market.

If you have any questions about this Privacy Policy or about how kh333 processes your personal data, you may contact our Data Protection team at any time by writing to [email protected] with the subject line "Privacy Enquiry". All privacy-related enquiries are acknowledged within 48 hours (Bangladesh Standard Time, UTC+6).

kh333 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the key data categories, specific data points within each category, and the primary purpose for which each category is collected.

Data Category Examples Primary Purpose
Identity Data Full name, date of birth, national ID number, passport number Account registration & KYC/AML verification
Contact Data Email address, Bangladeshi mobile number, residential address Account communication, OTP delivery, support
Financial Data bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history Deposit & withdrawal processing, AML compliance
Technical Data IP address, device type, browser type, operating system, session tokens Security, fraud prevention, platform optimisation
Usage Data Pages visited, games played, bet history, session duration, click-stream data Personalisation, responsible gaming monitoring
Verification Documents Scanned NID, passport, driver's licence, proof of address (utility bill, bank statement) Age verification, identity verification, AML
Communications Data Support chat transcripts, email correspondence, complaint records Customer support, dispute resolution, quality assurance

kh333 does not intentionally collect special categories of personal data (such as health data, biometric data, racial or ethnic origin, or political opinions) unless such data is volunteered by you in the context of a responsible gaming self-assessment or a support interaction, in which case it is processed solely for the purpose of providing the requested support service.

kh333 collects personal data through the following channels and mechanisms:

  • Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you directly provide personal data to kh333.
  • Automated technical collection: When you access kh333.io, our servers automatically record technical data including your IP address, browser type, device identifiers, and page interaction data via server logs and first-party analytics tools.
  • Cookies and similar technologies: kh333 uses cookies, pixel tags and local storage objects to collect usage data and support Platform functionality. See Section 7 (Cookies & Tracking) for full details.
  • Third-party verification services: When you submit identity documents, kh333 may process those documents via third-party KYC (Know Your Customer) and AML verification service providers. These providers operate under strict data processing agreements with kh333.
  • Payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay or a bank transfer, the relevant payment provider shares transaction confirmation data with kh333 to enable the processing of your request.
  • Device and location signals: kh333 may receive geolocation signals derived from your IP address to verify that you are accessing the Platform from a permitted jurisdiction. kh333 does not collect precise GPS-level location data.

kh333 processes personal data only where a lawful basis exists for doing so. The primary lawful bases relied upon by kh333 are set out below:

  • Contractual necessity: The majority of data processing carried out by kh333 is necessary for the performance of the contract between kh333 and you as a registered player. This includes processing data to operate your account, process deposits and withdrawals, settle bets, and deliver customer support.
  • Legal obligation: kh333 is subject to applicable legal and regulatory requirements including AML obligations, age verification requirements, and data retention mandates. Certain data processing is necessary for compliance with these obligations and is not subject to your consent.
  • Legitimate interests: kh333 processes certain technical and usage data on the basis of its legitimate interests in maintaining Platform security, preventing fraud, detecting and investigating prohibited conduct, improving the Platform, and conducting internal analytics. kh333 has assessed that these interests do not override the fundamental rights and interests of data subjects.
  • Consent: Where kh333 processes your data for purposes that are not strictly necessary for the contract or required by law — such as sending you promotional communications about bonuses and seasonal offers (e.g., Eid or BPL cricket promotions) — kh333 will seek your explicit consent at the time of collection. You may withdraw this consent at any time by contacting [email protected] or updating your communication preferences in Account Settings.

kh333 uses the personal data collected from you for the following purposes:

  • To create and maintain your kh333 player account, including verifying your identity and age (21+ requirement) and managing your account settings and preferences.
  • To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa or Mastercard) and to maintain accurate transaction records.
  • To settle bets and wagers placed on sports events (including BPL cricket, IPL, T20 World Cup, football), casino games and other Platform products, and to credit winnings to your account Balance.
  • To send you transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and important policy updates. These communications are necessary for the operation of your account and are not subject to opt-out.
  • To monitor account activity for signs of problem gambling as part of our responsible gaming programme, including applying deposit limits, session reminders and self-exclusion measures where requested or required.
  • To conduct AML screening, fraud detection and identity verification in compliance with applicable legal obligations.
  • To investigate and respond to customer support enquiries, complaints and disputes.
  • To analyse aggregated usage data to improve Platform performance, personalise the gaming experience, and inform product development decisions.
  • Where you have given consent, to send you promotional offers and marketing communications about bonuses, tournaments and seasonal promotions. You may opt out at any time.

kh333 does not sell your personal data to any third party. kh333 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

  • Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa and Mastercard receive the minimum financial and identity data necessary to process your requested transaction.
  • Identity verification and KYC providers: Third-party KYC and AML service providers receive identity documents and personal data solely for the purpose of completing regulatory verification checks. These providers are contractually prohibited from using your data for any other purpose.
  • Game content providers: Game providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Ezugi and Microgaming may receive anonymised session data for game performance and fairness auditing purposes. No directly identifiable personal data is shared with game providers for marketing or profiling purposes.
  • Platform hosting and cloud infrastructure providers: kh333's technology infrastructure partners process data solely as data processors under kh333's instructions and are bound by strict data processing agreements.
  • Legal and regulatory authorities: kh333 will disclose personal data to competent legal authorities, law enforcement bodies or regulators where required to do so by applicable law, court order or regulatory direction, or where kh333 reasonably believes such disclosure is necessary to prevent fraud, money laundering or other illegal activity.
  • Professional advisers: kh333's legal, audit and compliance advisers may access personal data on a confidential basis where necessary to provide professional services to kh333.

Any third party with whom personal data is shared is required to maintain appropriate technical and organisational security measures and to process the data only in accordance with kh333's instructions and for the specified purpose.

kh333.io uses cookies and similar tracking technologies to support Platform functionality, enhance the user experience, and collect analytics data. The following categories of cookies are used:

  • Strictly Necessary Cookies: These cookies are essential for the operation of the Platform. They enable core functions such as session management, account authentication, security token handling and load balancing. These cookies cannot be disabled without impairing Platform functionality.
  • Functional Cookies: These cookies remember your preferences — such as your chosen language, display settings and game lobby filters — so that you do not have to reconfigure them on each visit. Functional cookies may be disabled, though some Platform features may be affected.
  • Analytics Cookies: kh333 uses first-party analytics tools to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, session durations and navigation paths. This data is used solely to improve Platform performance and user experience. kh333 does not use third-party advertising analytics networks.
  • Security and Fraud Prevention Cookies: These cookies support kh333's fraud detection and AML monitoring systems by tracking device fingerprints, unusual access patterns and potential account takeover signals.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may prevent you from accessing certain areas of the Platform or from completing account actions such as login and deposit. kh333 does not use third-party advertising or retargeting cookies.

kh333 retains personal data for the periods set out in the table below, or for such longer period as is required by applicable legal, regulatory or contractual obligations:

Data Category Retention Period Basis
Account & Identity Data Duration of account + 5 years after closure AML and regulatory compliance
Financial Transaction Records 7 years from date of transaction Financial record-keeping obligations
Verification Documents (NID, passport) Duration of account + 5 years after closure AML compliance, legal obligation
Betting & Gaming History Duration of account + 3 years after closure Dispute resolution, responsible gaming records
Customer Support Communications 3 years from date of last interaction Dispute resolution, quality assurance
Technical & Usage Logs 13 months on a rolling basis Security monitoring, fraud detection
Marketing Consent Records Duration of consent + 3 years Proof of consent, regulatory compliance

Upon expiry of the applicable retention period, personal data is either securely deleted from kh333's systems or, where deletion is not immediately practicable, anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical and platform improvement purposes.

As a kh333 player and data subject, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". kh333 will respond to all valid data rights requests within 30 days.

  • Right of Access: You have the right to request a copy of the personal data kh333 holds about you, together with information about how that data is processed. kh333 will provide this information in a structured, commonly used and machine-readable format where technically feasible.
  • Right to Rectification: If any personal data held by kh333 about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data fields (such as registered name and date of birth) cannot be changed after verification without supporting documentation.
  • Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for consent-based processing — you have the right to request erasure of your personal data. This right does not apply where kh333 is required to retain data under a legal or regulatory obligation.
  • Right to Restriction of Processing: You may request that kh333 restrict the processing of your personal data in certain circumstances, for example while the accuracy of disputed data is verified or while an objection to processing is considered.
  • Right to Object: You have the right to object to the processing of your personal data where kh333 relies on legitimate interests as the lawful basis. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your preferences in Account Settings or contact [email protected].
kh333 will not charge a fee for processing data rights requests submitted in good faith. All requests are acknowledged within 48 hours and fulfilled within 30 calendar days of receipt. Where a request is complex or numerous, kh333 may extend this period by a further 30 days and will notify you accordingly.

kh333 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Our security framework includes the following controls:

  • 256-bit SSL/TLS encryption applied to all data in transit across the entire kh333.io domain, including account pages, deposit pages, withdrawal pages and all API endpoints.
  • Encryption at rest for sensitive data categories including financial data, identity documents and verification records stored on kh333's infrastructure.
  • Multi-factor authentication (MFA/2FA) available to all registered players via OTP sent to the registered Bangladeshi mobile number, strongly recommended for account security.
  • Role-based access controls (RBAC) ensuring that kh333 employees can only access personal data on a strictly need-to-know basis relevant to their specific role and responsibilities.
  • Regular security audits and penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities in the Platform infrastructure.
  • Automated threat monitoring covering unusual login attempts, account takeover signals, suspicious transaction patterns and potential AML indicators, with escalation protocols for critical security events.

While kh333 takes every reasonable measure to protect personal data, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights, kh333 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

The kh333 Platform is strictly intended for adults aged 21 years and above. kh333 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the kh333 registration process, and accounts for which age verification cannot be completed will be suspended pending resolution.

If kh333 discovers or is notified that personal data has been inadvertently collected from a person under the age of 21, kh333 will take immediate steps to delete that data and permanently close the associated account. Any funds deposited by an underage user will be returned via the original payment method where technically possible, subject to applicable AML requirements.

Parents and guardians who believe that a minor in their care may have accessed the kh333 Platform should contact [email protected] immediately. kh333's compliance team will investigate all such reports on a priority basis and take appropriate action within one business day of notification.

kh333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where a material change is made to this Privacy Policy, kh333 will provide reasonable advance notice to registered players by posting a prominent notice on the Platform or by sending a notification to the registered contact details associated with affected accounts.

The date on which this Privacy Policy was last updated is displayed prominently at the top of this page and within the policy effective date notice. We encourage you to review this Privacy Policy periodically to stay informed about how kh333 protects your data. Your continued use of the kh333 Platform following the notification of a change to this Privacy Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns or requests relating to this Privacy Policy or to the way in which kh333 processes your personal data, please contact us using the details below. All privacy enquiries are handled by kh333's Data Protection team and will be acknowledged within 48 hours (BST, UTC+6).

  • Email: [email protected] — please use the subject line "Privacy Enquiry" for data protection matters.
  • Support availability: 24 hours a day, 7 days a week — English and Bengali agents on duty at all times.
  • Response time: Privacy enquiries acknowledged within 48 hours; substantive response within 30 calendar days for data rights requests.
This Privacy Policy was last updated and is effective as of 1 January 2026. This version supersedes all previous versions of the kh333 Privacy Policy. If you have questions about a previous version of this policy, please contact us at [email protected].