Privacy Policy – How kikrya Collects, Uses and Protects Your Data

Who We Are and How to Contact Us

kikrya operates the online gaming platform accessible at https://kikrya.bet, offering sports betting, live casino, slot games, crash games, fishing games, and related services to players in Bangladesh and other permitted territories. All references to "kikrya", "we", "us", or "our" in this Policy refer to the kikrya platform and its operating entity.

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the personal data we hold about you, please contact our Data Support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Telegram: @kikryaofficial
• Live Chat: Available 24/7 through the kikrya platform

All data-related correspondence should include your registered account username and a clear description of your request. kikrya will acknowledge data requests within 48 hours (Bangladesh Standard Time, UTC+6) and aim to resolve them within 15 business days.

What Personal Data We Collect

kikrya collects personal data across several categories depending on your interaction with the platform. The following table summarises the primary data categories, examples of specific data points collected, and the reason for collection:

kikrya does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you voluntarily disclose such information during support interactions, it will be treated with the highest level of confidentiality and will not be used for any purpose beyond resolving your immediate support request.

How We Collect Your Data

kikrya collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing identity verification, submitting a withdrawal request, contacting support, or participating in a promotion.
• Automated collection: Technical and session data collected automatically when you visit or interact with the kikrya platform, including through cookies, web beacons, and server log files.
• Payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, and Upay when a deposit or withdrawal is initiated through their platforms. kikrya does not receive your mobile banking credentials — only confirmation of transaction success, reference numbers, and amounts.
• Game providers: Gaming activity data shared by third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming through their integrated platform APIs. This data covers bet amounts, game outcomes, and session durations within their respective products.
• Fraud and compliance tools: Risk signals and device fingerprint data generated by our internal security and anti-fraud systems to protect both the platform and legitimate players.

How We Use Your Personal Data

kikrya uses your personal data for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain the security and integrity of your account over time.
• Transaction processing: To process deposits and withdrawals accurately and to maintain financial records as required for reconciliation and audit purposes.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to comply with applicable know-your-customer (KYC) obligations.
• Responsible gaming compliance: To monitor gaming patterns for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit limits and cooling-off periods where requested or required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Platform personalisation: To tailor game recommendations, promotional offers, and content to your demonstrated preferences and activity history on kikrya.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance and continuity of service.
• Legal and regulatory compliance: To meet applicable anti-money-laundering (AML) record-keeping obligations and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage patterns that help us improve the kikrya platform, fix technical issues, and develop new features.
• Marketing communications (where consented): To send you promotional emails or Telegram messages about relevant kikrya offers if you have opted in to receive such communications. You may withdraw this consent at any time by contacting support.

Legal Basis for Processing

kikrya processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kikrya — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and data retention mandates.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — for example, sending you optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Sharing Your Data with Third Parties

kikrya does not sell your personal data. We share data only where strictly necessary and with the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction details required to process your deposit or withdrawal. They operate under their own privacy policies and data protection frameworks.
• Game technology providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and others) receive session and bet data necessary to run their games within the kikrya platform. All providers are contractually bound to data confidentiality obligations.
• Identity verification partners: Where automated KYC checks are required, we may share identity data with specialist verification service providers operating under strict data processing agreements.
• IT infrastructure and hosting providers: Our cloud infrastructure and server hosting partners who process data on our behalf under binding data processor agreements, with no independent right to use your data.
• Legal and regulatory authorities: Where required by applicable law or a lawful order from a competent authority, kikrya may disclose personal data to law enforcement agencies, financial intelligence units, or other regulators. We will notify you of such disclosures to the extent permitted by law.
• Professional advisers: Legal counsel, auditors, and accountants, where access to your data is strictly necessary for the provision of their professional services to kikrya and subject to binding confidentiality obligations.

kikrya does not transfer personal data to recipients located outside the jurisdiction without implementing appropriate safeguards, including contractual data transfer protections where applicable.

Cookies and Tracking Technologies

kikrya uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, prevent fraud, and understand how players interact with our pages. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function — including session authentication tokens and CSRF protection tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game category, and responsible gaming reminder intervals.
• Analytics cookies: Collect anonymised data about page visits, session durations, and navigation patterns to help us improve the kikrya platform. This data is aggregated and does not identify you individually.
• Security cookies: Support our fraud detection and bot-prevention systems by recording device fingerprint signals and unusual interaction patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into and using the kikrya platform. Disabling functional or analytics cookies will not affect your ability to play but may limit certain personalisation features.

Data Retention

kikrya retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following standard retention periods:

• Account and identity data: Retained for a minimum of five years following permanent account closure, to meet anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven years in accordance with standard financial record-keeping practice.
• Support communications: Retained for three years from the date of the final interaction, to support dispute resolution and quality assurance.
• Session and technical logs: Retained for 12 months on a rolling basis and then purged unless required for an ongoing investigation or legal proceeding.
• Marketing consent records: Retained for the duration of your consent and for one year thereafter as proof of consent.

Where data is no longer required and no legal retention obligation applies, kikrya will securely delete or anonymise it in accordance with our internal data destruction procedures.

Your Rights as a Data Subject

You have the following rights with respect to your personal data held by kikrya. To exercise any of these rights, contact us at [email protected] with the subject line "Data Request" and your registered account username:

• Right of access: Request a copy of all personal data kikrya holds about you, along with information about how it is used.
• Right to rectification: Request correction of any inaccurate or incomplete personal data held on your account.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to restriction: Request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being disputed.
• Right to data portability: Request a copy of the personal data you have provided to us in a structured, machine-readable format.
• Right to object: Object to the processing of your data on the grounds of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

kikrya will respond to all data rights requests within 15 business days. In complex cases, this period may be extended by a further 15 business days with prior notification. kikrya reserves the right to verify your identity before processing any data rights request.

Data Security

kikrya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kikrya's servers.
• AES-256 encryption at rest for sensitive stored data including identity records and account credentials.
• Bcrypt hashing with salting for all stored account passwords — kikrya never stores passwords in plain text.
• Role-based access controls ensuring that staff members can only access personal data relevant to their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated intrusion detection and anomaly monitoring systems that operate continuously.
• Secure data destruction procedures for hardware and digital media containing personal data.

Despite our rigorous security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kikrya will notify affected players promptly and take immediate remediation steps.

Children and Minors

The kikrya platform is strictly for adults aged 21 years and above. kikrya does not knowingly collect personal data from any person under the age of 21. If you believe that a minor has registered an account or provided personal data to kikrya without proper authorisation, please contact us immediately at [email protected]. Upon confirmation, kikrya will promptly close the account, delete all associated personal data, and return any deposited funds to the payment method of origin.

kikrya employs age-verification procedures at registration and at withdrawal to reduce the risk of underage participation. Players who cannot satisfactorily verify their age will have their accounts suspended until verification is completed or will have their accounts permanently closed if verification cannot be established.

Changes to This Privacy Policy

kikrya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When a material change is made, we will post the updated Policy on this page with a revised "Last updated" date and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the kikrya platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how kikrya protects your personal data.