Privacy Policy — How krkiya Protects Your Data

📅 Effective Date: 1 July 2026 — Version 2.4

1. Introduction & Scope

This Privacy Policy ("Policy") describes how krkiya ("krkiya", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to visitors and registered players ("you", "your") of the krkiya platform accessible at krkiya.vip (the "Platform"). This Policy applies to all personal data processed in connection with your use of the Platform, including account registration, deposits and withdrawals, game activity, customer support interactions, and marketing communications.

By registering a krkiya account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the krkiya Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you do not agree with the practices described in this Policy, you should discontinue use of the Platform and close your account.

This Policy is written in English and is intended for players based in Bangladesh. All data subject rights described in this document may be exercised by contacting our support team in English at [email protected].

2. Data Controller

krkiya acts as the data controller in respect of the personal data collected from players and visitors to the Platform. As data controller, krkiya is responsible for determining the purposes and means by which your personal data is processed. For all data protection enquiries, requests to exercise your rights, or complaints relating to the handling of your personal data, please contact our dedicated data protection team at [email protected]. All correspondence will be acknowledged within five (5) business days and resolved within thirty (30) calendar days wherever practicable.

3. Data We Collect

3.1 Identity & Account Data

When you register a krkiya account, we collect information necessary to create and maintain your account and to verify your identity in accordance with our Know Your Customer ("KYC") obligations. This includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification purposes — krkiya is an 18+ platform)
• Residential address, including division, district, and postcode within Bangladesh
• Email address and mobile phone number
• Username and encrypted password (passwords are never stored in plain text)
• Copies of identity documents such as National Identity Card (NID), passport, or driving licence
• Proof of address documents such as utility bills or bank statements

3.2 Financial & Transaction Data

In order to process deposits and withdrawals, krkiya collects and records financial information relating to your transactions on the Platform. This includes:

• bKash, Nagad, Rocket, or Upay account numbers associated with your profile
• Bank account details where bank transfer payment methods are used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and others)
• Transaction amounts, dates, reference numbers, and status records
• Deposit and withdrawal history in Bangladeshi Taka (৳)
• Bonus and promotional credit records including wagering activity

3.3 Gaming & Betting Activity Data

krkiya records all game and betting activity conducted through your account for the purposes of account management, dispute resolution, responsible gaming monitoring, and fraud prevention. This includes bet amounts, game types, session durations, win and loss records, and sporting markets accessed.

3.4 Technical & Device Data

When you access the krkiya platform, our systems automatically collect certain technical data about your device and connection, including IP address, device type, operating system, browser type and version, time zone, and referring URL. This data is used for security monitoring, fraud prevention, and to improve platform performance.

3.5 Communications Data

If you contact krkiya's customer support team — whether via live chat, WhatsApp, or email — we retain records of those communications, including the content of messages and the date and time of contact. This data is used to resolve your query, improve our service quality, and for staff training purposes.

3.6 Marketing Preference Data

Where you have opted in to receive marketing communications from krkiya, we record your preferences and track engagement with promotional emails and notifications (such as open rates and click activity) in order to deliver relevant offers and to measure the effectiveness of our campaigns.

4. How We Collect Your Data

krkiya collects personal data through the following channels:

• Directly from you: Information you provide when registering your krkiya account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automatically: Technical and device data collected via cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform.
• From payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when processing your deposits and withdrawals.
• From identity verification services: Where krkiya uses third-party KYC verification tools to cross-reference the identity documents you submit, we may receive a verification status or risk score from such providers.
• From fraud prevention systems: Device fingerprint data and behavioural signals collected for the purpose of detecting and preventing fraudulent account activity.

5. Legal Basis for Processing

krkiya processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

6. How We Use Your Data

krkiya uses the personal data we collect for the following purposes:

• To create, manage, and secure your krkiya account and process your krkiya Login requests
• To verify your identity and age (18+) in accordance with our KYC obligations
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and connected banking partners
• To calculate, credit, and administer bonuses, promotions, and loyalty rewards
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To monitor player behaviour for responsible gaming purposes and to apply self-exclusion, deposit limit, and cooling-off measures where requested or required
• To respond to your customer support queries and resolve account disputes
• To send you transactional communications such as deposit confirmations and withdrawal notifications
• To send you marketing communications about krkiya promotions, new games, and seasonal offers — where you have given your consent
• To improve the design, performance, and security of the krkiya platform through analytics and user feedback
• To comply with applicable anti-money laundering, counter-terrorism financing, and other legal obligations

krkiya will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

7. Data Sharing & Third Parties

krkiya does not sell your personal data to third parties. We may share your data with carefully selected third parties only to the extent necessary to operate the Platform and comply with our legal obligations. Categories of third-party recipients include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners — to facilitate deposits and withdrawals in Bangladeshi Taka (৳). These providers process only the financial data required for your transaction and are contractually bound to protect your information.
• Identity verification providers: KYC and AML screening services that assist krkiya in verifying player identity documents and assessing fraud risk. These providers receive only the data strictly necessary for verification purposes.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi that power games available on the krkiya platform. These providers may receive your player ID and game session data for the purpose of delivering game content and ensuring fair play.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers that support the technical operation of the krkiya platform under strict data processing agreements.
• Legal and regulatory authorities: Where krkiya is required by applicable law, court order, or regulatory direction to disclose player data, we will comply with such requirements after careful legal review.

All third parties with whom krkiya shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with krkiya's instructions and applicable data protection obligations.

8. International Data Transfers

The krkiya platform and its supporting infrastructure may involve the transfer of personal data to servers or service providers located outside Bangladesh. Where such transfers occur, krkiya takes appropriate steps to ensure that your data receives a level of protection equivalent to that which would apply within Bangladesh. This may include entering into data processing agreements with relevant contractual clauses, or relying on recognised data transfer mechanisms applicable under relevant data protection frameworks.

If you would like further information about the specific safeguards in place for international data transfers involving your personal data, please contact us at [email protected].

9. Data Retention

krkiya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our agreements. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your krkiya account and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction in accordance with applicable financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following the end of your account relationship with krkiya.
• Customer support communications: Support ticket and chat records are retained for up to three (3) years following resolution of the relevant query.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within ninety (90) days.
• Self-exclusion records: Where a player has requested self-exclusion, a record of that exclusion is retained indefinitely to prevent re-registration during the exclusion period and to protect the player's interests.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Cookies & Tracking Technologies

krkiya uses cookies and similar tracking technologies to operate and improve the Platform, to remember your preferences, and to analyse how players interact with our services. The main categories of cookies used by krkiya are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your krkiya account and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, last visited game category, and display preferences. Disabling these cookies may reduce your experience on the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps krkiya identify areas for improvement and optimise the user experience. No personally identifiable data is shared with analytics providers.
• Marketing cookies: Used — only where you have given consent — to deliver personalised promotional content and to measure the effectiveness of krkiya marketing campaigns. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the krkiya platform.

11. Your Rights

As a krkiya player, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your account. krkiya will respond within thirty (30) calendar days of receiving a verified request.

• Right of access: You have the right to request a copy of all personal data that krkiya holds about you, together with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by krkiya be corrected or updated.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You have the right to request that krkiya restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to krkiya in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to krkiya processing your personal data on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where krkiya processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that some of these rights are not absolute and may be subject to exemptions or limitations where krkiya has a legal obligation to retain or continue processing certain data. krkiya will always explain the basis for any limitation applied to your request.

12. Children's Privacy

The krkiya platform is strictly intended for adults aged 18 years and older. krkiya does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will immediately suspend the relevant account, delete the data, and return any deposited funds to the verified payment method of origin. If you believe that a minor may have registered a krkiya account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. Security Measures

krkiya implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the krkiya platform
• Encrypted storage of all passwords — krkiya staff never have access to your plain-text password
• Multi-factor authentication options available for krkiya Login to protect against unauthorised account access
• Continuous real-time monitoring of platform activity for anomalous patterns indicative of fraud or unauthorised access
• Strict role-based access controls ensuring that krkiya staff access personal data only on a need-to-know basis
• Regular security audits and penetration testing conducted by independent third-party security specialists
• Incident response procedures enabling rapid containment and notification in the event of a data security incident

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, krkiya will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

14. Changes to This Privacy Policy

krkiya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where amendments are material — meaning they significantly affect how we use your personal data or the rights available to you — krkiya will provide not less than seven (7) days' advance notice via the registered email address on your account or via a prominent notice on the Platform prior to the changes taking effect.

Minor amendments — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to reflect new features — may take effect immediately upon publication. The "Effective Date" at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how krkiya protects your data.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how krkiya has handled your personal data, please contact our data protection team using the details below. All enquiries are handled in English by our dedicated support team, available around the clock Bangladesh Standard Time (BST, UTC+6).

• Data Protection Contact: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within your krkiya account dashboard
• WhatsApp Support: Available 24/7 — contact details provided upon account registration
• Response Time: Acknowledgement within 5 business days; full resolution within 30 calendar days

If you are not satisfied with krkiya's response to your data protection complaint, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice.

Last Reviewed: 1 July 2026  |  Version: 2.4  |  Language: English  |  Market: Bangladesh