Privacy Policy — kerala88

1 Information We Collect

kerala88 collects personal data from you in several ways: directly when you register an account, make a deposit, contact support, or participate in promotions; automatically when you use our platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

1.1 Identity & Contact Information

When you register an account on kerala88, we collect your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and Bangladesh mobile phone number. This information is required to create your account, verify your identity in accordance with our Know Your Customer (KYC) obligations, and communicate with you about your account.

1.2 Identity Verification Documents

As part of our KYC and Anti-Money Laundering (AML) compliance programme, we may collect copies of government-issued identification documents, including your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as a recent utility bill or bank statement. These documents are processed securely and retained only for the duration required by our compliance obligations.

1.3 Financial & Transaction Data

We collect records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method details (such as your registered bKash, Nagad, or Rocket mobile number, or masked card numbers for Visa and Mastercard transactions), and transaction timestamps. We do not store full card numbers or mobile banking PINs — payment credentials are handled by our PCI-compliant payment processing partners.

1.4 Usage & Behavioural Data

When you interact with the kerala88 platform, we automatically collect data about your activity, including the games you play, bets you place, session duration, pages you visit, features you interact with, and your betting patterns. This data is used to personalise your experience, identify potential responsible gaming concerns, detect fraud, and improve our services.

1.5 Technical Data

We collect technical information about the device and network you use to access kerala88, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, and time zone setting. This data helps us ensure platform compatibility, investigate security incidents, and enforce our geographic and responsible gaming restrictions.

2 How We Use Your Data

kerala88 processes your personal data on the basis of one or more of the following legal grounds: the performance of our contract with you (i.e., providing the gambling services you have registered for), compliance with our legal obligations (including KYC, AML, and responsible gaming requirements), our legitimate interests in operating a safe and commercially viable platform, and — where applicable — your explicit consent.

The table below summarises the primary purposes for which we use your personal data and the legal basis for each:

2.1 Marketing Communications

With your consent, kerala88 may send you promotional communications about new games, special offers, seasonal bonuses (such as Eid promotions, BPL season offers, or T20 World Cup specials), and platform updates via email or SMS to your registered Bangladesh mobile number. You may opt out of marketing communications at any time by contacting support@kerala88 or by using the unsubscribe link in any promotional email. Opting out of marketing communications will not affect essential transactional notifications about your account.

3 Data Sharing & Disclosure

kerala88 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, SureCash, and card processing networks (Visa, Mastercard). These providers operate under their own privacy policies and are bound by contractual data protection obligations. We share only the data required to execute the transaction — we do not pass your full betting history or account behaviour data to payment processors.

3.2 Identity Verification Partners

To fulfil our KYC obligations, we may share your identity documents and personal details with third-party identity verification service providers. These providers operate under strict confidentiality agreements and process your data solely for the purpose of verifying your identity on our behalf.

3.3 Game Software Providers

Our casino and sports betting games are powered by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data necessary to operate their games within our platform. They do not receive your full personal profile unless required for regulatory compliance in their own licensing jurisdiction.

3.4 Legal & Regulatory Disclosure

kerala88 may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of kerala88, our players, or the public. We will notify you of any such disclosure to the extent permitted by law.

4 Cookies & Tracking Technologies

kerala88 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform effectively, remember your preferences, keep your session active while you are logged in, and analyse how the platform is used so we can continue to improve it.

4.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in and security cookies that help detect fraud. You cannot opt out of essential cookies without disabling core platform functionality.
• Preference Cookies: Remember your settings and preferences, such as language selection or display settings, so you do not have to re-enter them on each visit.
• Analytics Cookies: Help us understand how players interact with kerala88 — which pages are visited most frequently, where users encounter difficulties, and how navigation flows can be improved. Data collected by analytics cookies is aggregated and does not identify individual users.
• Responsible Gaming Cookies: Track session duration and betting activity to support our responsible gaming monitoring tools. These cookies help us identify patterns that may indicate problem gambling behaviour and trigger appropriate interventions.

4.2 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive notifications before a cookie is stored. Please note that disabling certain cookies may affect the functionality of kerala88 — in particular, disabling essential cookies will prevent you from logging into your account or completing transactions.

5 Data Security & Storage

kerala88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Two-factor authentication (2FA) enforcement for all internal staff accounts with access to player data.
• Automated monitoring systems that detect and alert our security team to unusual access patterns or potential data breaches in real time.
• Regular staff training on data protection obligations and secure handling procedures.

5.1 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kerala88 will notify affected players promptly via their registered email address. We will provide details of the nature of the breach, the data affected, the likely consequences, and the measures we have taken or propose to take to address the breach. We will also notify the relevant supervisory authorities as required by applicable law.

5.2 Data Storage Locations

Player data collected by kerala88 is stored on secure servers. Where data is transferred to or processed in countries outside Bangladesh, we ensure that appropriate safeguards are in place, including contractual data protection clauses with all third-party processors, to ensure your data receives a level of protection equivalent to that which it would receive under applicable Bangladeshi data protection norms.

6 Your Privacy Rights

As a player on kerala88, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at support@kerala88 with the subject line "Data Rights Request". We will respond within 30 days of receiving your verified request.

6.1 Right of Access

You have the right to request a copy of the personal data that kerala88 holds about you. We will provide this information in a structured, commonly used, and machine-readable format. A copy of your data will typically be delivered to your registered email address within 30 days of your verified request.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your account settings page. For changes to identity-verified data (such as your legal name or date of birth), we may require supporting documentation.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (if consent was the basis for processing), or where you object to processing based on legitimate interests and there are no overriding grounds. Please note that certain data must be retained by kerala88 for legal and regulatory compliance purposes (see Section 7: Data Retention Policy) and cannot be erased on request alone.

6.4 Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of your data or where you have objected to processing and we are considering your objection — you may request that we restrict the processing of your personal data. During a restriction period, we will store your data but not actively process it beyond what is necessary to maintain the restriction.

6.5 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You also have the absolute right to object to the processing of your data for direct marketing purposes at any time, with no requirement to justify your objection.

6.6 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive the personal data you provided to kerala88 in a structured, commonly used format, and to transmit that data to another service provider where technically feasible.

7 Data Retention Policy

kerala88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was originally collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention guidelines apply:

• Account data (identity, contact details): Retained for the duration of your account plus a minimum of 5 years following account closure, to comply with AML and KYC regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping obligations.
• Identity verification documents: Retained for the duration of your account plus 5 years following closure, or as required by applicable AML regulations.
• Responsible gaming records: Retained for the duration of any self-exclusion or restriction period plus 5 years, to prevent circumvention of self-exclusion agreements.
• Customer support communications: Retained for 3 years from the date of the last interaction, to allow for the resolution of any disputes that may arise.
• Analytics and behavioural data: Aggregated analytics data may be retained indefinitely in anonymised form. Identifiable behavioural data is retained for no longer than 2 years from the date of collection.
• Cookie and session data: Session cookies expire when you close your browser. Persistent cookies are retained for the period stated in the cookie settings, typically between 30 days and 12 months.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be linked to an identifiable individual. Data that has been anonymised may be retained and used for statistical and research purposes without time limit.

8 Contact & Data Controller

kerala88 acts as the data controller in respect of the personal data collected and processed through this platform. If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact our Data Protection team using the details below. All communications regarding data privacy should be directed to:

8.1 Updates to This Privacy Policy

kerala88 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players via the email address associated with their account and/or by posting a prominent notice on the kerala88 platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

8.2 Complaints

If you believe that kerala88 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to raise a complaint with our Data Protection team in the first instance. We are committed to resolving all data protection concerns promptly and fairly. If you remain dissatisfied following our response, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.