kiriky Privacy Policy — How We Protect Your Data

1. Data We Collect

kiriky collects personal data through several channels — directly from you when you register or interact with our Platform, automatically when you browse, and from third-party payment and identity verification services. The information we collect falls into the following categories:

1.1 Registration & Account Data

When you create a kiriky account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required for mandatory 18+ age verification).
• Valid email address used as your primary account identifier.
• Mobile phone number (used for OTP two-step verification and account recovery).
• Residential address (district, city, division — Bangladesh addresses accepted).
• Your chosen username and encrypted password (we never store passwords in plain text).
• Preferred deposit and withdrawal method details (e.g., bKash number, Nagad number, bank account).

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, kiriky may request and store copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Valid passport (photo and data page).
• Bangladesh Road Transport Authority driving licence.
• Recent utility bill or bank statement (dated within 90 days) for proof of address.
• Screenshot or confirmation of the mobile banking account (bKash, Nagad, Rocket, Upay) used for deposits.

KYC documents are stored securely and accessed only by authorised kiriky compliance staff. They are not used for any purpose beyond identity verification and fraud prevention.

1.3 Transaction & Financial Data

For every deposit, withdrawal, bonus claim, and bet placed on kiriky, we record:

• Transaction amount in Bangladeshi Taka (৳ / BDT).
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard).
• Transaction date, time (Bangladesh Standard Time, UTC+6), and reference number.
• Account balance before and after each transaction.
• Bonus code used (if applicable) and wagering progress.

1.4 Gameplay & Betting Activity

kiriky maintains a complete record of your gaming activity on the Platform, including:

• Games played, bet amounts, outcomes, and session durations for all casino titles.
• Sports betting selections, stake amounts, odds accepted, and settlement results for cricket and other markets.
• In-game events such as bonus round triggers, feature activations, and jackpot participation.

This data is used for dispute resolution, fraud detection, responsible gaming monitoring, and regulatory record-keeping.

1.5 Technical & Device Data

When you access kiriky, our servers and analytics tools automatically record:

• IP address and approximate geographic location (country/city level).
• Device type (desktop, mobile, tablet), operating system, and browser type and version.
• Pages visited, features accessed, time on page, and navigation flow.
• Session start and end timestamps.
• Referral source (how you arrived at kiriky.net).

1.6 Communications Data

If you contact kiriky's support team via email or live chat, we retain records of those communications — including your messages, our responses, and any attachments — for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

kiriky uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. Our primary purposes for processing your personal data are:

2.1 Marketing Communications

kiriky will only send you promotional emails or SMS notifications regarding bonuses, new games, or seasonal offers if you have explicitly opted in to marketing communications during registration or via your account settings. You may withdraw this consent and unsubscribe from marketing communications at any time by emailing [email protected] with the subject line "Unsubscribe" or by updating your communication preferences in your kiriky account dashboard.

2.2 Automated Decision-Making

kiriky uses automated systems to detect unusual account activity, flag potential fraud, identify bonus abuse patterns, and monitor for responsible gaming indicators. Where an automated process results in an account action (such as a temporary suspension or a bonus cancellation), you have the right to request human review of that decision by contacting [email protected].

3. Data Sharing & Disclosure

kiriky does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary for each specific purpose.

3.1 Game Providers

To facilitate game play, kiriky shares limited player session data with our third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data typically includes a pseudonymised player identifier, session token, currency (BDT), and account balance. Game providers are contractually prohibited from using this data for any purpose other than delivering their games to you within the kiriky Platform.

3.2 Payment Processors

To process deposits and withdrawals, kiriky shares the necessary transaction data with your chosen payment service provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card networks (Visa, Mastercard). These providers process your payment data in accordance with their own privacy policies and applicable financial regulation.

3.3 Identity Verification Services

kiriky may use third-party identity verification providers to assist with KYC document checks. These providers receive only the data necessary to carry out the specific verification task and are bound by strict data processing agreements.

3.4 Legal and Regulatory Disclosure

kiriky may be required by law or by order of a competent authority to disclose personal data. In such cases, kiriky will comply with the lawful request and, where legally permitted, will notify the affected player. Circumstances in which kiriky may disclose data to authorities include:

• Investigations into suspected money laundering or financial crime.
• Court orders or lawful requests from law enforcement agencies.
• Prevention of fraud where disclosure is necessary to protect kiriky or its players.
• Compliance with any applicable regulatory requirement in force in Bangladesh or another relevant jurisdiction.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving kiriky, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, kiriky will provide reasonable advance notice and the successor entity will be required to honour the commitments made in this Privacy Policy.

4. Cookies & Tracking

kiriky uses cookies and similar tracking technologies to make the Platform function correctly, to remember your preferences, and to understand how players navigate and use our website. This section explains what cookies we use and how you can control them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, to maintain your session, and to remember certain preferences. Cookies set by kiriky.net are first-party cookies; cookies set by third-party services integrated into the Platform are third-party cookies.

4.2 Categories of Cookies Used by kiriky

4.3 Managing Cookies

You may adjust your browser settings to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent kiriky from functioning correctly — you will not be able to log in or play games without session cookies in place. Analytics and functional cookies can be disabled without affecting core Platform access. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

5. Data Security

kiriky takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational security measures to protect your information against unauthorised access, loss, alteration, or disclosure.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption for all data transmitted between your device and kiriky.net.
• Encrypted password storage — passwords are hashed using industry-standard cryptographic algorithms. kiriky staff cannot view your password in plain text.
• OTP two-step verification for account logins, adding an additional layer of authentication beyond your password.
• Firewall and intrusion detection systems monitoring for unusual traffic patterns and potential attacks around the clock.
• Access controls — database and server access is restricted to authorised personnel with a legitimate operational need, enforced by role-based permissions.

5.2 Organisational Safeguards

• All kiriky staff who handle personal data are subject to confidentiality obligations and receive data security training.
• Third-party service providers (game providers, payment processors, KYC partners) are vetted for their data security standards and are bound by contractual data processing agreements before receiving access to any player data.
• kiriky conducts periodic internal security reviews to identify and address potential vulnerabilities in our data handling practices.

5.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, kiriky will take immediate steps to contain the breach, investigate its cause, and implement corrective measures. Affected players will be notified promptly in accordance with applicable data protection requirements. Notifications will be sent to the email address registered on your kiriky account. We strongly encourage you to keep your registered email address current and to use a strong, unique password for your kiriky account and your email account.

6. Data Retention

kiriky retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law, regulation, or legitimate operational need. The following general retention periods apply:

Once the applicable retention period has expired and there is no outstanding legal obligation to retain the data further, kiriky will securely delete or anonymise the data so that it can no longer be linked back to you as an individual.

6.1 Self-Exclusion Records

If you have applied for a self-exclusion under kiriky's Responsible Gaming programme, your self-exclusion status and associated account records will be retained for the full duration of the exclusion period plus an additional 5 years, in order to prevent the re-registration of a new account during or after the exclusion period and to maintain an auditable record of the exclusion request.

7. Your Privacy Rights

As a kiriky player, you hold a number of rights in relation to your personal data. kiriky is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered account email address and a description of your request.

7.1 Right of Access

You have the right to request a copy of the personal data kiriky holds about you. Upon receiving a valid access request, kiriky will provide a structured summary of your data within 30 days. We may need to verify your identity before fulfilling an access request to ensure your data is not disclosed to an unauthorised third party.

7.2 Right to Rectification

If any personal data kiriky holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or phone number) can be processed via kiriky's support team after identity verification. Corrections to KYC documents require submission of updated verification materials.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request that kiriky delete your personal data in certain circumstances — for example, if you have closed your account and the data is no longer required for any legal or regulatory purpose. Please note that kiriky is not able to erase data where retention is required by law (such as transaction records subject to financial regulation) or where the data is needed to enforce our Terms & Conditions. Requests for erasure that conflict with these obligations will be partially fulfilled — data that can be deleted will be, and data that must be retained will be held for the minimum legally required period only.

7.4 Right to Restrict Processing

In certain circumstances (for example, where you dispute the accuracy of your data or have objected to its processing and a determination is pending), you may request that kiriky restricts processing of your personal data to storage only, pending resolution of the matter.

7.5 Right to Data Portability

Where kiriky processes your data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service if you wish.

7.6 Right to Object

You have the right to object to kiriky's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your rights and freedoms outweigh those interests. kiriky will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your objection.

7.7 Rights Related to Automated Decision-Making

Where kiriky makes automated decisions that produce significant effects on your account (such as fraud-related suspensions), you have the right to request human review of that decision. Submit your request to [email protected] and kiriky's compliance team will review the matter and respond within 10 business days.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

kiriky reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make a material change to this Policy, we will update the effective date shown at the top of this page and, where the change is significant, we will notify registered players by email at least 14 days before the updated Policy takes effect.

Your continued use of the kiriky Platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue using the Platform and contact our support team to request account closure.

8.2 Children & Minors

kiriky is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a user is under 18, their account will be immediately suspended, their data will be deleted as quickly as legally permissible, and any deposits will be returned. If you believe a minor has registered a kiriky account, please notify us immediately at [email protected].

8.3 Third-Party Websites

The kiriky Platform does not link to external third-party websites. This Privacy Policy applies solely to data collected and processed by kiriky at kiriky.net. kiriky is not responsible for the privacy practices of any third-party payment providers, game studios, or other external services that you may interact with independently of the kiriky Platform.

8.4 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or kiriky's data practices, please contact our dedicated privacy support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 5 business days of receipt
• Available: 24 hours a day, 7 days a week, in English
• Platform: kiriky.net — Bangladesh online casino and sports betting