Home 9 Privacy Policy

Privacy Policy

Last updated: September 2026

This policy explains what personal data Khalti88 collects, how that data is used, who it may be shared with, and the rights available to you as a user of the platform. It applies to visitors, registered players, and affiliates who use the website, mobile app, or related services at khalti88nepal.org.

1. Information We Collect

1.1 Personal Information

When you register or verify your account, we may collect:

Full legal name
Date of birth
Email address
Nepali mobile phone number
Residential address
Government-issued identification (citizenship card, national ID, or passport) as part of Know Your Customer (KYC) verification

1.2 Financial Information

Payment method details (Khalti, eSewa, or IME Pay identifiers; bank account numbers where bank transfer is enabled)
Transaction history — deposit amounts, withdrawal amounts, timestamps, and status, recorded in NPR
Payment gateway references. Full wallet PINs and passwords are not stored on our servers

1.3 Technical Information

IP address and approximate location derived from IP
Device type, operating system, and browser version
Language and timezone settings
Cookies and local storage identifiers

1.4 Usage Information

Pages visited, session duration, and referral URLs
Games played, bet types, stakes, outcomes, and bonus usage
Betting history across casino, live dealer, sports, and esports products
Login timestamps and session frequency

Support chats, emails, and attached screenshots are stored so we can resolve the issue and keep a record of the conversation.

2. How We Use Your Information

Creating, authenticating, and maintaining your player account
Processing deposits and withdrawals in NPR
Completing KYC and anti-money laundering (AML) checks
Providing customer support and resolving disputes
Preventing fraud, multi-accounting, and unauthorised access
Improving platform performance, navigation, and payment success rates
Sending promotional communications where you have opted in (you can opt out at any time)
Applying responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion
Meeting legal and regulatory obligations

3. Data Sharing and Third Parties

We may share personal data with the following categories of recipients, and only to the extent necessary for the stated purpose:

Payment processors — Khalti, eSewa, IME Pay, and any other cashier partners used to move NPR
Identity verification providers — to confirm age and identity
Game and data providers — limited technical data required to deliver gameplay
Security and fraud prevention vendors — to detect suspicious activity
Law enforcement and legal authorities — when required by valid legal process
Professional advisers — legal or financial advisers under confidentiality duties

We do not sell personal data to third parties for marketing purposes.

4. Data Security

We implement the following measures to protect personal data:

256-bit SSL encryption for data in transit
Encrypted storage for sensitive personal and financial data at rest
Role-based access controls limiting data access to authorised personnel
Regular security reviews and vulnerability assessments
Secure server hosting with restricted physical and digital access
Monitoring for unusual login patterns and failed authentication attempts

No online system is risk-free. Use a unique password, do not reuse it on other sites, and never share OTP codes or wallet MPINs.

5. Cookies

The platform uses cookies and similar technologies for the following purposes:

Essential cookies — required for login, session management, and cashier functions
Functional cookies — to remember language preference and display settings
Analytics cookies — to measure traffic and identify performance issues (may include third-party tools such as Google Analytics)
Advertising cookies — used by third-party networks where applicable; these can be disabled in browser settings

You can manage or disable cookies in your browser. Blocking essential cookies may prevent login or deposits from completing.

6. Data Retention

Personal data is kept while your account remains open. After closure, certain records are retained as follows:

Transaction and financial records — a minimum of 5 years, or longer where record-keeping rules require it
KYC documentation — retained for the same period as financial records
Support correspondence — kept long enough to close the case and handle later complaints
Technical and security logs — rotated or deleted on a defined schedule unless needed for an investigation

If you opt out of marketing, your contact details may stay on a suppression list so further messages are not sent.

7. Your Rights

Subject to applicable law, you may:

Access — request a copy of the personal data we hold about you
Correction — request that inaccurate or incomplete data be updated
Deletion — request deletion, subject to limits where financial or AML records must be kept
Restriction — request that processing be limited in certain circumstances
Opt-out of marketing — withdraw consent through account settings or by contacting support

To exercise these rights, email [email protected] with the subject line “Privacy request”, your registered username, and a short description of what you need. Identity checks may be required before we act.

8. Changes to This Policy

This policy may be updated when practices, features, or legal requirements change. Material updates will be posted on the website or sent by email where appropriate. The “last updated” date at the top of this page shows the current version.

Continued use of the platform after an update constitutes acceptance of the revised policy. If you do not agree, you may close your account through support. Read this document together with the Terms and Conditions.