Kirikiya Privacy Policy
Your Data, Your Rights

1 Introduction

This privacy policy explains how kirikiya collects, uses, stores, and protects the personal data of players who use the kirikiya platform. It applies to all players who access kirikiya through any device or channel, including the kirikiya website and the kirikiya app.

Kirikiya is committed to handling your personal data with care and transparency. We understand that players in Bangladesh trust kirikiya with sensitive information, and we take that responsibility seriously. This policy is written in plain language so that every kirikiya player can understand exactly what happens to their data.

By registering a kirikiya account or continuing to use the kirikiya platform, you confirm that you have read and understood this privacy policy. If you do not agree with how kirikiya handles personal data, you should not use the platform. If you have questions at any point, the kirikiya support team is available 24/7.

2 Data We Collect

Kirikiya collects personal data in two ways: data that you provide directly when you register or use the platform, and data that is collected automatically as you interact with kirikiya. The table below summarises the categories of data kirikiya collects and the source of each category.

Kirikiya does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is specifically required for responsible gaming purposes and you have given your explicit consent.

3 How We Use Your Data

Kirikiya uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that go beyond what is described in this privacy policy. The main purposes for which kirikiya uses your personal data are:

• To create and manage your kirikiya account, including verifying your identity and age before you can deposit or play.
• To process your deposits and withdrawals in BDT via bKash, Nagad, and Rocket, and to maintain accurate financial records.
• To detect and prevent fraud, money laundering, and other prohibited activity on the kirikiya platform.
• To provide customer support and respond to your queries, complaints, and data requests.
• To send you important account notifications, such as deposit confirmations, withdrawal updates, and security alerts.
• To personalise your kirikiya experience, including showing you relevant game recommendations and promotions based on your activity.
• To analyse how players use kirikiya so that we can improve the platform, fix bugs, and develop new features.
• To comply with legal and regulatory obligations, including anti-money laundering requirements and responsible gaming duties.

4 Legal Basis for Processing

Kirikiya processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing that is necessary to fulfil the kirikiya terms and conditions you agreed to when you registered, including account management and payment processing.
• Legal obligation: Processing that kirikiya is required to carry out by law, such as identity verification for anti-money laundering compliance and responsible gaming checks.
• Legitimate interests: Processing that is necessary for kirikiya's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing that is based on your explicit consent, such as sending you promotional offers or processing sensitive personal data for responsible gaming purposes. You can withdraw your consent at any time.

5 Data Sharing

Kirikiya does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: Kirikiya shares your financial data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers have their own privacy policies and security standards.
• Identity verification providers: Kirikiya may share your identity data with third-party verification services to confirm your age and identity as required by our responsible gaming and anti-fraud obligations.
• Legal and regulatory authorities: Kirikiya will disclose your personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights and safety of kirikiya players.
• Service providers: Kirikiya works with trusted technology and infrastructure providers who process data on our behalf under strict data processing agreements. These providers are not permitted to use your data for their own purposes.

6 Data Retention

Kirikiya retains your personal data for as long as your account is active and for a period after account closure as required by law and our internal data governance policies. The specific retention periods that apply to different categories of kirikiya player data are as follows:

• Account and identity data is retained for a minimum of five years after account closure to comply with anti-money laundering regulations.
• Financial transaction records are retained for a minimum of five years from the date of the transaction.
• Customer support communications are retained for two years from the date of the last interaction.
• Technical and usage data collected via cookies and analytics tools is retained for up to 13 months from the date of collection.

Once the applicable retention period has expired, kirikiya will securely delete or anonymise your personal data so that it can no longer be linked back to you. If you request deletion of your data before the end of the retention period, kirikiya will delete what it is legally permitted to delete and explain why any remaining data must be kept.

7 Security Measures

Kirikiya takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption of all personal data in transit using TLS and at rest using AES-256 encryption.
• Role-based access controls that restrict access to player data to kirikiya staff who need it to perform their specific job function.
• Regular security audits and penetration testing of the kirikiya platform and infrastructure.
• Two-factor authentication options for kirikiya player accounts to reduce the risk of unauthorised access.
• Continuous monitoring of the kirikiya platform for suspicious activity, including automated fraud detection systems.
• A documented incident response plan that is activated immediately in the event of a suspected data breach.

While kirikiya takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also have a role to play — keep your kirikiya password strong and unique, do not share it with anyone, and contact the support team immediately if you suspect your account has been compromised.

8 Cookies

Kirikiya uses cookies and similar tracking technologies to make the platform work correctly and to improve your experience. A cookie is a small text file that is stored on your device when you visit kirikiya. The types of cookies kirikiya uses are:

• Essential cookies: These are required for the kirikiya platform to function. They keep you logged in during your session and ensure that your account settings are applied correctly. You cannot opt out of essential cookies without stopping your use of kirikiya.
• Analytics cookies: These help kirikiya understand how players use the platform — which games are most popular, where players encounter problems, and how long sessions typically last. This data is used in aggregate and is not linked to individual players.
• Preference cookies: These remember your settings and preferences, such as your preferred language and display options, so you do not have to set them again each time you visit kirikiya.

Kirikiya does not use advertising cookies or third-party tracking cookies that follow you across other websites. You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use kirikiya normally.

9 Your Rights

As a kirikiya player, you have the following rights in relation to your personal data. Kirikiya will respond to all valid requests within a reasonable timeframe and without charge for standard requests.

To exercise any of these rights, contact the kirikiya support team at [email protected]. Please include your registered account details so that kirikiya can verify your identity before processing the request.

10 Children's Privacy

Kirikiya is strictly an adult platform. The kirikiya service is not directed at, and is not intended for use by, anyone under the age of 18. Kirikiya does not knowingly collect personal data from anyone under 18 years of age.

If kirikiya discovers that personal data has been collected from a person under 18, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned where possible. Any winnings generated by an underage player will be forfeited.

11 Policy Changes

Kirikiya may update this privacy policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When a material change is made to this policy, kirikiya will notify players via the email address registered to their account or through a prominent notice on the kirikiya platform.

The updated privacy policy will take effect from the date stated in the notification. If you continue to use kirikiya after that date, you are confirming your acceptance of the revised policy. If you do not agree with the changes, you should stop using kirikiya and close your account before the new policy takes effect.

The "Last Updated" date at the top of this page always reflects when the most recent revision was made. Kirikiya recommends checking this page periodically so you are always aware of the current version of the kirikiya privacy policy.

12 Contact Us

If you have any questions about this kirikiya privacy policy, want to exercise your data rights, or need to report a privacy concern, please contact the kirikiya support team. We are available 24 hours a day, 7 days a week.