Xk88 Privacy Policy — Your Data, Our Responsibility

This Privacy Policy applies to all services on the xk88 platform — including the website, mobile app, and all associated digital services. We believe transparency is the foundation of trust, which is why this policy is written in language that is as clear and straightforward as possible.

This Privacy Policy is drawn up in accordance with applicable data protection laws in Bangladesh and international standards. If you use our services and disagree with any part of this policy, please discontinue use and get in touch with us.

Xk88 collects two types of information — what users provide directly and what is automatically gathered during platform use:

We never store your password in plain text — passwords are always kept in hashed format and are not visible to any of our staff.

Xk88 collects information through the following methods:

• Information provided directly: Information you provide directly during registration, KYC verification, or when contacting support.
• Automatically collected: Information automatically collected while you use the platform, through cookies, web beacons, and log files.
• Payment Provider: Transaction details received through payment services such as bKash, Nagad, and Rocket during deposits and withdrawals.
• Verification Service: Information received from third-party identity verification services as part of the KYC process.

Xk88 uses collected data only for specific, legitimate purposes. We never misuse your information:

• Creating, verifying, and managing your account.
• Confirming deposits, withdrawals, and transactions.
• Preventing fraud, money laundering, and other illegal activities.
• Personalizing your gaming experience and improving service quality.
• Meeting legal and regulatory compliance obligations.
• Providing customer service and technical support.
• Monitoring usage patterns to ensure responsible gaming.

If any new purpose for using your data is introduced, we will notify you in advance and obtain fresh consent where required.

Xk88 never sells your data. However, limited information may be shared in certain circumstances:

• Payment Provider: Necessary information is shared with bKash, Nagad, Rocket, or your bank to process transactions.
• Identity Verification Service: With verified identity agencies approved under the KYC process.
• Legal authorities: To comply with court orders or government directives.
• Security Experts: In cases involving cyberattacks or fraud investigations.

Xk88 uses cookies and similar technologies to enhance your platform experience. Cookies are small data files stored on your device:

• Essential cookies: Required for login sessions and security. Disabling these will prevent the platform from functioning properly.
• Functional cookies: To remember your preferences and settings.
• Analytics Cookies: To understand how the platform is used. Data remains anonymous.

You can manage cookies through your browser settings. Please note that disabling essential cookies may limit certain features.

Xk88 retains your data only for as long as necessary or as required by law:

• Account information may be retained for up to 5 years after account closure (AML regulations).
• Transaction records are retained for up to 7 years as required by law.
• Gaming logs are typically deleted automatically after 2 years.
• Marketing data is deleted immediately upon withdrawal of consent.

Xk88 has put in place multi-layered technical and organizational measures to protect your data:

• In all data transmissions TLS 1.3 encryption is used.
• Data on servers AES-256 encryption Is retained.
• Regular Security Audit and penetration testing are conducted.
• Two-Factor Authentication (2FA) Provides an extra layer of security for your account.
• For suspicious activity Real-Time Monitoring System is up and running.
• Access to data is restricted to authorized personnel only, and Role-Based Access Control technology is used.

However, no data transmission over the internet can be guaranteed to be 100% secure. We strongly encourage you to use a strong password, never share your login credentials with anyone, and avoid accessing your account on public Wi-Fi.

Under the xk88 Privacy Policy, the following rights are guaranteed to you:

Xk88 is strictly for users aged 18 and above. We follow a rigorous policy to protect the data of minors:

• Age verification is mandatory at the time of registration.
• Age verification documents are checked as part of the KYC process.
• If we become aware that data has been collected from a minor, the account will be immediately closed and all associated data will be deleted.
• If a parent or guardian suspects their child has created an account, please contact us immediately.

Xk88 reserves the right to update this Privacy Policy as needed. When changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• For significant changes, notification will be sent via email or in-app alert.
• Continued use of the platform after any changes will be considered acceptance of the updated privacy policy.

For any questions, requests, or complaints regarding this Privacy Policy, please reach out to us. Our dedicated privacy team is available 24/7, seven days a week:

• Email: [email protected]
• Live Chat: Reach us directly from within the platform.
• For general inquiries, visit our FAQ View page.
• To view our Terms of Service Terms and Conditions Visit the page.

For data protection requests, we typically respond within 30 business days after verifying your identity.