Your Privacy at krikya

1 Introduction

krikya ("we", "us", "our") operates the online gaming and sports betting platform available at krikya.vu. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor to our website, or a recipient of our marketing communications.

This Privacy Policy sets out, in clear and accessible terms, the categories of personal data we collect from you, the purposes for which that data is processed, the legal grounds on which processing takes place, the circumstances under which we may share your data with third parties, and the rights you hold with respect to your own personal information.

This Policy applies to all users of the krikya platform, including players based in Bangladesh and any other jurisdiction in which krikya is accessible. It should be read alongside the krikya Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement between you and krikya.

If you have any questions about how krikya handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact our support team at [email protected]. We are available 24 hours a day, seven days a week.

2 Personal Data We Collect

krikya collects personal data through several channels: information you provide directly when registering or using your account, information generated automatically through your use of the platform, and information received from trusted third-party service providers where permitted. The table below summarises the principal categories of personal data we collect.

2.1 Sensitive Personal Data

krikya does not intentionally collect sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where you voluntarily provide such information in the context of a responsible gaming assessment or self-exclusion request. Any such data is processed solely to deliver the responsible gaming service you have requested and is not used for any other purpose.

2.2 Data from Minors

krikya does not knowingly collect personal data from individuals under the age of 18. If we discover that personal data has been submitted by a person under 18, that data will be deleted and the associated account will be closed immediately. If you believe a minor has registered on krikya, please notify us at [email protected] without delay.

3 How We Use Your Personal Data

krikya uses your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The following describes how each category of data is used:

• Identity and Contact Data — To create and manage your krikya account, to verify your identity and age in accordance with our eligibility requirements, to communicate with you about your account status, and to comply with any applicable platform obligations requiring know-your-customer (KYC) procedures.
• Financial Data — To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, or Mastercard), to verify that payment instruments are held in your own name, and to detect and prevent financial fraud.
• Transaction Data — To maintain an accurate record of your betting and gaming activity, to calculate and credit bonus entitlements, to calculate and process withdrawal amounts, and to generate account statements upon request.
• Technical and Usage Data — To ensure the security and stability of the krikya platform, to diagnose technical faults, to prevent unauthorised access, to personalise your gaming experience, and to analyse platform performance and usage patterns so that we can improve our services.
• Communications Data — To handle and resolve your support enquiries, to maintain a record of prior interactions for quality assurance purposes, and to train our support team.
• Marketing Preferences — Where you have opted in to receive marketing communications, to send you information about krikya promotions, bonuses, new game releases, and seasonal offers relevant to the Bangladesh market. You may withdraw your consent to marketing communications at any time by contacting [email protected].

4 Legal Basis for Processing

krikya processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and krikya — including account creation, identity verification, payment processing, and the delivery of gaming services — is carried out on the legal basis that it is necessary for the performance of that contract.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, anti-money laundering monitoring, responsible gaming monitoring, and improving our services is carried out on the basis of krikya's legitimate interests, provided those interests are not overridden by your own interests or fundamental rights.
• Legal Obligation: Where krikya is required to process or retain data in order to comply with applicable platform obligations, including record-keeping obligations, this processing is carried out on the basis of compliance with a legal obligation.
• Consent: Processing for direct marketing purposes is carried out on the basis of your freely given, specific, and informed consent. Where consent is the legal basis, you have the right to withdraw it at any time without detriment to your account standing.

5 Sharing Your Personal Data

krikya does not sell, rent, or trade your personal information to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

5.1 Payment Processing Partners

To process deposits and withdrawals, krikya shares the financial and identity data necessary to complete each transaction with the relevant payment service provider. For players in Bangladesh, this includes bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and the Visa and Mastercard networks as applicable. These providers operate under their own privacy policies and security frameworks and are contractually required to handle your data securely.

5.2 Game Technology Providers

The casino games available on krikya are provided by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. To enable gameplay and record game outcomes, limited session and account identifiers are shared with the relevant game provider during an active gaming session. These providers do not receive your full identity or contact data.

5.3 Identity Verification Services

krikya may engage specialist third-party identity verification providers to assist in confirming the authenticity of identity documents submitted by players during KYC processes. These providers process identity data strictly for verification purposes and are bound by confidentiality obligations.

5.4 Analytics and Security Providers

krikya uses trusted analytics and cybersecurity service providers to monitor platform performance, detect fraudulent activity, and analyse usage patterns. These providers receive technical and usage data in aggregated or pseudonymised form where possible.

5.5 Legal and Regulatory Disclosure

krikya may disclose personal data to law enforcement authorities, courts, or other public bodies where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. In such cases, krikya will disclose only the data that is strictly required by the relevant legal demand.

5.6 Business Transfers

In the event that krikya undergoes a merger, acquisition, or sale of all or a portion of its assets, personal data held by krikya may form part of the transferred assets. You will be notified by email and by a prominent notice on the krikya platform in advance of any such transfer, and you will retain the right to request deletion of your data prior to the transfer taking effect.

6 Cookies & Tracking Technologies

krikya uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the krikya website. Cookies allow krikya to recognise your browser across sessions, maintain your login state, remember your preferences, and collect anonymised usage statistics.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the krikya platform to function. They enable core features such as maintaining your logged-in session, processing transactions, and applying your security preferences. These cookies cannot be disabled.
• Functional Cookies: These remember your preferences — such as your preferred language, last visited game category, and responsible gaming settings — to provide a more personalised experience.
• Analytics Cookies: These collect anonymised data about how visitors use the krikya platform, including which pages are most visited and how users navigate between sections. This information helps krikya improve platform design and content.
• Security Cookies: These assist in detecting and preventing fraudulent account activity, identifying unusual login patterns, and protecting against cross-site request forgery (CSRF) and related attack vectors.

6.2 Managing Cookies

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling certain cookies may affect the functionality of the krikya platform — in particular, disabling strictly necessary cookies will prevent you from logging in or completing transactions. Detailed instructions for managing cookies can be found in the help documentation of your browser.

7 Data Security

krikya applies a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• Transport Layer Security (TLS 1.2 and above) encryption for all data transmitted between your device and krikya's servers.
• Encryption of sensitive data fields (including identity document data and financial identifiers) at rest in krikya's databases.
• Role-based access controls ensuring that krikya staff can access personal data only to the extent required for their specific job function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Multi-factor authentication (MFA) required for all krikya administrative system access.
• Intrusion detection systems and real-time monitoring for anomalous activity across krikya's infrastructure.

While krikya takes all reasonable precautions to protect your personal data, no internet-based system can be guaranteed to be completely secure. You play an important role in data security by maintaining a strong, unique password for your krikya account and reporting any suspected unauthorised access to [email protected] immediately.

8 Data Retention

krikya retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, to maintain your active account, and to comply with applicable record-keeping obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered account with krikya, plus a minimum of five (5) years following account closure.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping practices.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure, or longer if required by a specific legal demand.
• Support Communications: Retained for three (3) years from the date of the most recent communication in a given thread.
• Marketing Preference Data: Deleted within thirty (30) days of receiving a valid opt-out or withdrawal of consent request.
• Analytics and Technical Data: Aggregated or anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymisation is complete.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9 Your Privacy Rights

Subject to applicable law, you have the following rights with respect to the personal data that krikya holds about you. To exercise any of these rights, please submit a written request to [email protected]. krikya will acknowledge your request within five (5) business days and respond in full within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data krikya holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by krikya be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that krikya delete the personal data it holds about you. This right does not apply where retention is required for legal compliance or to defend legal claims.
• Right to Restriction of Processing: You have the right to request that krikya restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. krikya will cease such processing upon receipt of a valid objection unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10 Children's Privacy

The krikya platform is strictly for adults aged 18 and above. krikya does not knowingly collect, store, or process personal data relating to individuals under the age of 18. Our registration process includes age verification steps designed to identify and prevent underage access.

If you are a parent or guardian and you believe that your child has submitted personal data to krikya without your consent, please contact us immediately at [email protected]. Upon receiving such notification, krikya will investigate promptly, close the account, and securely delete all data associated with the minor's account.

11 Third-Party Links

The krikya platform does not include links to external third-party websites. However, if you access krikya through a third-party referral source, or if you independently visit third-party sites in connection with your use of krikya (such as the website of a payment provider like bKash or Nagad), please be aware that those sites operate under their own independent privacy policies.

krikya has no responsibility or liability for the privacy practices, content, or security of any third-party website. We encourage you to review the privacy policy of any external site before submitting personal information to it.

12 Updates to This Privacy Policy

krikya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or improvements to our platform. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material, krikya will notify registered players by email to the address on file, or by a prominent notice displayed on the krikya platform, at least seven (7) days before the revised Policy takes effect. Your continued use of the krikya platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

We encourage you to revisit this page periodically to stay informed about how krikya is protecting your personal information.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way krikya handles your personal data, please contact our dedicated privacy support team. All enquiries are handled in English and are treated with strict confidentiality.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time Target: Acknowledgement within 5 business days; full response within 30 days for data rights requests

krikya does not operate a telephone support line. All privacy-related enquiries must be submitted in writing via email so that a complete and accurate record of the request can be maintained.