krikaya Privacy Policy

krikaya is committed to protecting the privacy and personal data of every player who uses our platform. This Policy sets out in clear terms how we handle the personal information you provide to us — from the moment you register an account through to the use of our games, payment services, and customer support.

We operate the krikaya platform primarily for players based in Bangladesh. Our data practices are designed to be transparent, fair, and proportionate to the services we provide. We take our data protection responsibilities seriously and invest in technical and organisational measures to keep your information secure.

This Policy applies to all personal data collected through the krikaya website, any associated mobile interfaces, email correspondence, live chat, and any other means by which you interact with us. It does not apply to third-party websites or services that may be linked to or from our platform — those entities operate under their own privacy policies.

krikaya collects personal data through a variety of channels as part of operating a secure, compliant, and enjoyable online gaming platform. The categories of personal data we may collect include:

2.1 Registration & Identity Data

When you create a krikaya account, we collect information you provide directly, including your full name, date of birth, email address, mobile phone number, preferred username, and account password (stored in hashed form). This data is required to establish your account and verify your identity.

2.2 Verification & KYC Documents

As part of our Know Your Customer (KYC) programme and anti-money laundering (AML) compliance obligations, we may collect copies of identity documents such as your National ID card, passport, or driving licence, as well as proof of address documents such as utility bills or bank statements, and proof of payment method ownership.

2.3 Financial & Transaction Data

We collect records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method details (e.g., bKash wallet number, Nagad account, Rocket number, Upay account, last four digits of a Visa or Mastercard), transaction timestamps, and account balance history. Full card numbers are never stored on krikaya's servers — card processing is handled by our PCI-compliant payment partners.

2.4 Gaming Activity Data

We maintain records of your gameplay on the krikaya platform, including games played, bet amounts, game outcomes, session durations, bonus usage, and wagering history. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Technical & Device Data

When you access the krikaya platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and time spent on each page. This data is collected via server logs and cookies.

2.6 Communications Data

If you contact our customer support team — via email, WhatsApp, or live chat — we retain records of those communications, including the content of your messages, the date and time of contact, and the resolution provided. This data helps us maintain service quality and resolve disputes.

krikaya uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain the security of your account.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain accurate financial records.
• KYC and AML compliance: To verify your identity as required by our anti-money laundering obligations and to detect and prevent financial crime.
• Gameplay and service delivery: To provide access to our games, sports betting markets, promotions, and all other platform features.
• Responsible gaming monitoring: To monitor gameplay patterns, identify signs of problem gambling, and implement responsible gaming tools such as deposit limits and self-exclusion where appropriate.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate (non-identifiable) form to improve our platform's performance, design, and game offering.
• Marketing communications: To send you promotional offers, bonuses, and platform updates — only where you have provided consent or where we have a legitimate interest in doing so. See Section 11 for your opt-out rights.

krikaya processes your personal data on the following legal grounds:

• Contractual necessity: Processing that is necessary to perform our contract with you — that is, to provide the krikaya gaming platform and all associated services. This covers account registration, payment processing, and gameplay delivery.
• Legal obligation: Processing that is required for us to comply with applicable law, including KYC identity verification, AML transaction monitoring, and record-keeping requirements.
• Legitimate interests: Processing that is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This covers fraud prevention, platform security, responsible gaming monitoring, and analytics for platform improvement.
• Consent: Processing based on your explicit, freely given consent. This applies primarily to marketing communications. You may withdraw consent at any time — see Section 11.

5.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to the site operator. krikaya uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform.

5.2 Types of Cookies We Use

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how players use the platform — for example, which pages are visited most frequently. This helps us improve the platform's performance and layout.
• Functional cookies: Used to remember your preferences, such as language settings or display options, to provide a more personalised experience.
• Analytics cookies: Used by third-party analytics providers to generate aggregated reports on platform usage. These do not identify individual players.

5.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can choose to block all cookies, accept only essential cookies, or delete cookies already stored on your device. Please note that disabling certain cookies may affect the functionality of the krikaya platform — for example, you may be unable to stay logged in or access certain features.

krikaya does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of trusted third-party service providers, strictly to the extent necessary to deliver our services:

• Payment processors: Companies that facilitate your financial transactions on the platform, including mobile wallet providers (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard). These parties receive only the data necessary to process your specific transactions.
• KYC and identity verification providers: Third-party services that assist us in verifying your identity and compliance with AML regulations. These services process the identity documents you submit during the verification process.
• Game providers: Third-party game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token or anonymised player ID to enable gameplay. They do not receive your full personal profile.
• IT and platform infrastructure providers: Companies that provide hosting, cloud storage, cybersecurity, and technical support services for the krikaya platform.
• Legal and regulatory authorities: krikaya may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of law in response to a lawful request, court order, or legal obligation.

krikaya retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and contractual obligations. The key retention principles we apply are:

• Active accounts: Personal data associated with an active krikaya account is retained for the duration of the account's existence plus a reasonable post-closure period.
• Closed accounts: Following account closure, we retain identity, financial, and transaction records for a minimum period as required to comply with AML regulations and to resolve any outstanding disputes or legal claims.
• KYC documents: Identity verification documents are retained for the period required by applicable AML regulations, typically a minimum of five years from the date of the last transaction.
• Support communications: Records of customer support interactions are retained for a minimum of two years to enable quality review and dispute resolution.
• Technical logs: Server and access logs are retained for a shorter period, generally up to twelve months, unless a longer period is required for a specific security investigation.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

krikaya implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the krikaya platform is encrypted using industry-standard SSL/TLS protocols, protecting it from interception in transit.
• Password hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store password credentials securely.
• Access controls: Access to personal data within krikaya's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required for their specific role.
• Regular security assessments: krikaya conducts periodic reviews of its security infrastructure to identify and address potential vulnerabilities.
• Fraud detection systems: Automated monitoring systems are in place to detect suspicious account activity, unusual login patterns, and potentially fraudulent transactions in real time.

As a krikaya player, you have a number of rights in relation to your personal data. To exercise any of the rights described below, please contact our support team at [email protected]. We will respond to all valid requests within 30 calendar days.

9.1 Right of Access

You have the right to request a copy of the personal data that krikaya holds about you. We will provide this in a clear, structured format. We may ask you to verify your identity before processing a subject access request.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update certain account details directly through your krikaya account profile. For more significant corrections, contact our support team.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing has no other lawful basis. Please note that this right is subject to overriding legal obligations — for example, we are required to retain certain financial and identity records for AML compliance purposes and cannot erase these on request.

9.4 Right to Restriction

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.

9.5 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time (see Section 11).

9.6 Right to Data Portability

Where we process your data on the basis of consent or contractual necessity and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.

The krikaya platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data from any person under the age of 18. If you are under 18, you must not register an account, make a deposit, or use any part of the krikaya platform.

If krikaya discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, we will immediately close the associated account, void any gameplay or transactions, and securely delete the relevant personal data. Any funds deposited by an underage player will be handled in accordance with our Terms & Conditions and applicable law.

krikaya may send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting offers), and other platform updates. We will only do this where:

• You have explicitly opted in to receive marketing communications during registration or at a later point in your account settings, or
• You are an existing player and the communication relates to our own similar products and services, and you have not opted out of such communications.

11.1 Opting Out

You have the right to opt out of marketing communications from krikaya at any time, free of charge and without giving any reason. You can do this by:

• Clicking the "unsubscribe" link in any marketing email we send you
• Updating your communication preferences in your krikaya account settings
• Contacting our support team at [email protected] and requesting removal from all marketing lists

Please allow up to 7 business days for your opt-out request to take effect across all our communication channels. Please note that opting out of marketing communications will not affect essential transactional communications, such as deposit confirmations, withdrawal notifications, or account security alerts.

krikaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The revised Policy will be published on this page with an updated effective date.

Where changes are material — for example, if we introduce a new category of data processing or change the way we share data with third parties — we will provide advance notice to registered players via email or an on-site notification, allowing you a reasonable period to review the changes before they take effect.

Your continued use of the krikaya platform after any amendment to this Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way krikaya handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)