krikay Privacy Policy

1. Data Controller

1.1 krikay is the data controller responsible for personal data collected through krikay.asia and all associated mobile-optimised pages. As data controller, krikay determines the purposes and means of processing your personal data and is accountable for its protection.

1.2 For all privacy-related enquiries, requests, or complaints, you may contact our dedicated support team at [email protected]. Please include "Privacy Request" in the subject line of your message so that it is directed to the correct team. krikay commits to acknowledging all privacy requests within five (5) Bangladesh Standard Time (BST, UTC+6) business days.

2. Data We Collect

2.1 Registration Data. When you create a krikay account, we collect the information you provide during sign-up, which typically includes your full name, date of birth, mobile phone number, email address, and chosen username. This information is necessary to create and manage your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification Data. To comply with our anti-money-laundering (AML) and know-your-customer (KYC) obligations, krikay may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence. Where requested, we may also ask for a recent utility bill or bank statement as proof of address. These documents are stored securely and used solely for verification purposes.

2.3 Financial and Transaction Data. We collect details of deposits, withdrawals, and wagers made through your krikay account. This includes transaction amounts, dates, times, payment method types (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank), and transaction reference numbers. We do not store full payment card numbers or mobile wallet PINs on our servers.

2.4 Technical and Device Data. When you access krikay.asia, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within our platform. This data helps us maintain platform security, diagnose technical issues, and understand how players navigate the site.

2.5 Gaming Activity Data. We maintain records of your gaming history on krikay, including games played, bet amounts, outcomes, session durations, and any responsible gaming tools you have activated. This data is used for account management, dispute resolution, fraud detection, and to personalise your experience within the platform.

2.6 Communications Data. If you contact krikay support by email or any other channel, we retain records of those communications, including the content of your messages and any attachments provided. This enables us to track the progress of your enquiry and maintain a consistent service record.

2.7 Cookies and Tracking Technologies. krikay uses cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage patterns. Please see Section 9 of this Policy for full details on our use of cookies and how you can manage them.

3. How We Use Your Data

The table below summarises the primary purposes for which krikay processes your personal data and the legal basis for each activity.

Purpose	Legal Basis
Account creation and management	Performance of contract
Age and identity verification (KYC)	Legal obligation
Processing deposits and withdrawals	Performance of contract
Fraud prevention and AML compliance	Legal obligation / legitimate interests
Platform security and abuse detection	Legitimate interests
Responsible gaming monitoring	Legal obligation / legitimate interests
Customer support and dispute resolution	Performance of contract
Promotional communications (opt-in only)	Consent
Platform analytics and improvement	Legitimate interests

3.1 krikay will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

3.2 Where you have opted in to receive promotional communications from krikay — such as notifications about new games, seasonal offers tied to Eid, Pohela Boishakh, or BPL season, and deposit bonuses — you may withdraw that consent at any time by contacting us at [email protected] or updating your marketing preferences within Account Settings.

4. Data Sharing and Third Parties

4.1 Game Providers. To deliver the games available on krikay, we share limited technical data (such as your session token and account identifier) with certified game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers receive only the minimum data necessary to operate their game software within our platform. They are contractually prohibited from using your data for any purpose beyond service delivery.

4.2 Payment Processors. To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other payment partners, we share necessary transaction data with those payment processors. All payment partners are bound by their own security standards and are prohibited from using your data beyond the payment transaction itself.

4.3 Fraud and Security Providers. krikay works with specialist fraud detection and cybersecurity partners who may process certain technical data (such as IP addresses and device fingerprints) to identify suspicious activity. These partners operate under strict data processing agreements and may not use your data for independent commercial purposes.

4.4 Legal and Regulatory Authorities. krikay may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal obligation, court order, or lawful government request. In such cases, we will disclose only the minimum data required to satisfy the legal request.

4.5 Business Transfers. In the event that krikay undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

4.6 No Sale of Data. krikay does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks under any circumstances.

5. Data Retention

5.1 krikay retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations, whichever is longer.

5.2 Account data and transaction records are retained for a minimum of five (5) years following the closure or last activity of an account. This retention period reflects our obligations under standard anti-money-laundering frameworks that apply to online gaming operators.

5.3 Identity verification documents (NID copies, passport scans, address proofs) are retained for a minimum of five (5) years following account closure. After this period, such documents are securely destroyed using methods that prevent reconstruction.

5.4 Communications data (support emails, chat logs) is retained for three (3) years from the date of last interaction, unless the communication relates to an unresolved dispute or legal proceeding, in which case it is retained until that matter is fully resolved.

5.5 Cookie and analytics data is retained for periods specified in our cookie management settings, generally between thirty (30) days and twelve (12) months depending on the cookie category.

5.6 Where you request deletion of your personal data under Section 7 of this Policy, krikay will delete all data that we are not legally required to retain. Data subject to mandatory retention periods will be archived, access-restricted, and deleted as soon as the applicable retention period expires.

6. Data Security

6.1 krikay employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular internal security audits, and two-factor authentication options for administrative systems.

6.2 While krikay takes all reasonable precautions, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a material risk to your personal data, krikay will notify affected players promptly and take immediate steps to contain and remediate the breach.

6.3 Players are responsible for maintaining the security of their krikay login credentials. You must not share your password with any third party. krikay support staff will never ask you for your password during any support interaction. If you suspect your account has been compromised, contact us immediately at [email protected].

7. Your Privacy Rights

As a krikay player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You may request a copy of the personal data krikay holds about you, together with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any mandatory legal retention requirements.
• Right to Restriction: You may ask krikay to restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
• Right to Object: You may object to processing based on krikay's legitimate interests, including profiling for personalisation. You may also withdraw consent to marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

7.1 krikay will respond to all verified privacy rights requests within thirty (30) days. If additional time is needed due to complexity, we will notify you within the initial thirty-day window and provide an expected completion date.

7.2 To protect your security, krikay may ask you to verify your identity before processing any privacy rights request. This is to ensure that personal data is not disclosed or modified in response to fraudulent requests.

8. Children and Minors

8.1 krikay's services are strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

8.2 If you are a parent or guardian and believe that a minor has registered on krikay.asia, please contact us immediately at [email protected]. We take such reports extremely seriously and will act without delay.

9. Cookies and Tracking Technologies

9.1 krikay uses cookies — small text files stored on your device — to enable core platform functionality, maintain your session after krikay login, remember your language and display preferences, and collect anonymised analytics data about platform usage. We do not use cookies to serve third-party advertising.

9.2 The categories of cookies used by krikay are:

• Strictly Necessary Cookies: Required for the platform to function. They enable session management, authentication, and security features. These cannot be disabled without breaking the service.
• Functional Cookies: Store your preferences such as display settings and accepted notification states. These improve your experience but are not essential to core function.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use krikay.asia. This helps us understand which features are popular, where users encounter difficulty, and how to improve the platform.

9.3 Most mobile browsers and devices allow you to manage or disable cookies through their settings. However, disabling strictly necessary cookies may prevent some features of krikay from working correctly. Refer to your browser's help documentation for instructions on managing cookie preferences.

10. International Data Transfers

10.1 krikay's platform serves players in Bangladesh. Some of our technology infrastructure and certified game providers operate servers located in other countries. Where personal data is transferred outside Bangladesh for processing — for example, to game provider servers — krikay ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to this Privacy Policy.

10.2 krikay does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate supplementary safeguards such as standard contractual clauses or binding corporate rules.

11. Changes to This Privacy Policy

11.1 krikay reserves the right to update this Privacy Policy at any time. When we make material changes, we will display a prominent notice on the platform and, where possible, notify registered players via their registered contact details prior to the changes taking effect.

11.2 The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed of how krikay handles your personal data. Continued use of the platform after a revised Privacy Policy has been published constitutes your acceptance of those changes.

12. Contact and Complaints

12.1 For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the krikay privacy team at [email protected] with "Privacy" in the subject line. Our team is available around the clock, seven days a week, and will acknowledge your message within five (5) BST business days.

12.2 If you are not satisfied with krikay's response to a privacy concern, you may escalate the matter through the formal complaints procedure described in the krikay FAQ. krikay will engage with all escalated privacy complaints in good faith and with the aim of reaching a fair resolution.