Privacy Policy
for krikoya

Introduction & Scope

This Privacy Policy applies to all players, visitors, and registered users of krikoya — Bangladesh's trusted online casino and sports betting platform. It governs how krikoya collects, processes, stores, and protects personal data submitted to or generated through your use of the platform, including but not limited to the website, any mobile-optimised interface, and all associated services.

By registering an account or continuing to use krikoya, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform and contact support@krikoya to request account closure.

krikoya is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This policy is written in plain English to ensure all players — regardless of technical background — can clearly understand how their information is managed.

Information We Collect

krikoya collects personal data through a number of channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party service providers where necessary for operational purposes. The categories of data we collect are described below.

Registration & Identity Data

When you create a krikoya account, we collect the following information:

• Full legal name
• Date of birth (for age verification purposes — krikoya is strictly 18+)
• Email address
• Mobile phone number
• Residential address (city and district within Bangladesh)
• Username and encrypted password

Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, krikoya may request the following documents at account opening or prior to processing a withdrawal:

• National ID (NID) card or passport scan
• Proof of residential address (utility bill, bank statement)
• Payment method confirmation (screenshot or reference from bKash, Nagad, Rocket, or Upay)

Transaction & Financial Data

All deposit and withdrawal activity on your krikoya account generates transaction records. We store details including transaction amounts in BDT (৳), timestamps, payment method identifiers (e.g., the last four digits of your bKash-linked number), and transaction reference codes. We do not store full payment credentials — these remain with the payment provider.

Platform Usage Data

When you use krikoya, we automatically collect certain technical and behavioural data to operate and improve the platform:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and game activity logs
• Crash reports and error logs where applicable

Communication Data

If you contact the krikoya support team via email at support@krikoya, we retain records of that correspondence including the content of messages, timestamps, and any attachments submitted. This data is used to resolve your query and improve service quality.

How We Use Your Data

krikoya uses the personal data it collects for specific, legitimate purposes only. We do not use your data for any purpose that has not been disclosed in this Privacy Policy. The primary purposes for which we process your personal data are set out below.

Marketing Communications

krikoya may send you promotional offers, bonus notifications, or platform updates by email, but only where you have explicitly opted in to receive such communications during registration or through your account preferences. You may opt out at any time by contacting support@krikoya or by updating your notification preferences in your account settings. Opting out of marketing communications does not affect your ability to use the platform.

Data Sharing & Third Parties

krikoya does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes — under any circumstances. We share your personal data only in the limited, specific situations described below, and only to the extent necessary for each purpose.

Game Providers

To deliver the games and betting markets available on krikoya, we share necessary session and account identifiers with our certified third-party game providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive only the minimum data required to initialise and run a game session. They are contractually prohibited from using this data for any purpose beyond game delivery.

Payment Processors

When you make a deposit or request a withdrawal, your transaction is processed through the relevant payment provider (bKash, Nagad, Rocket, or Upay). krikoya shares only the transaction amount, your account reference, and the destination mobile wallet number or account identifier with the payment provider. Full payment credentials are handled exclusively by the payment provider and are never stored on krikoya servers.

Compliance and Legal Disclosure

krikoya may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where compelled to do so by applicable legal obligation. In such cases, we will disclose only the data specifically requested and will notify affected players where we are legally permitted to do so.

Service Providers

krikoya uses a small number of trusted third-party service providers to support platform operations — including hosting infrastructure, email delivery, and fraud detection tools. These providers act as data processors on our behalf and are contractually bound to process your data only on our documented instructions, with appropriate security measures in place.

Cookies & Tracking Technologies

krikoya uses cookies and similar tracking technologies to maintain platform functionality, remember your session, and collect anonymous analytics data. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across requests and sessions, remember preferences, and collect usage statistics. Cookies do not contain executable code and cannot access other files on your device.

Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function correctly. These manage your login session, maintain your gaming wallet state, and ensure secure access to your account. These cannot be disabled without affecting your ability to use krikoya.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and last-visited game category. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymous, aggregated data about how players navigate and interact with krikoya — such as which pages are visited most frequently and how long sessions typically last. This data is used to improve platform design and performance. No personally identifiable information is included in analytics data.

What We Do Not Use

krikoya does not use advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with third-party ad networks or social media platforms. We do not embed social share buttons or tracking widgets that call external servers without your knowledge.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, or to be notified before a new cookie is set. Note that disabling strictly necessary cookies will prevent you from logging in or maintaining a game session on krikoya. Disabling analytics or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

Data Security & Storage

krikoya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security approach is reviewed and updated regularly to address evolving threats.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and krikoya servers is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms this encryption is active.
• Encrypted Password Storage: Passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before being stored. Even krikoya staff cannot retrieve your original password.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff accounts require multi-factor authentication and are subject to role-based access controls that limit which data they can view or modify.
• Intrusion Detection: krikoya employs automated intrusion detection and anomaly monitoring systems to identify and respond to suspicious access patterns in real time.

Data Storage Location

Personal data collected by krikoya is stored on secured servers. We take care to ensure that any infrastructure used to store player data applies security standards consistent with those described in this policy. Data associated with Bangladesh players — including payment transaction records — is handled with full awareness of the sensitivity of financial data in the local context.

Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, krikoya will take immediate containment steps and notify affected players without undue delay via their registered email address, providing details of the nature of the breach and the steps being taken in response.

Your Data Rights

As a player on krikoya, you hold a number of rights over the personal data we hold about you. krikoya respects these rights and will process all valid data rights requests in good faith and within a reasonable timeframe. To exercise any of the rights listed below, contact support@krikoya with the subject line "Data Rights Request" and specify clearly which right you wish to exercise.

Right of Access

You have the right to request a copy of the personal data krikoya holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared. We will provide this information within 30 days of receiving a valid request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as email address or mobile number, you may be able to update these directly within your account settings.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data — particularly transaction records and identity verification documents — must be retained for a minimum period to satisfy legal obligations. In such cases, we will inform you of the specific retention requirement that applies.

Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of data or have objected to processing — you may request that we restrict how we process your data while the matter is under review.

Right to Object

Where krikoya processes your personal data on the basis of legitimate interest, you have the right to object. This includes the right to opt out of direct marketing communications at any time, unconditionally and without providing any reason.

Data Retention Policy

krikoya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations. The table below summarises our standard retention periods by data category.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (e.g., platform-wide game statistics) may be retained indefinitely for analytical purposes as it contains no personally identifiable information.

Children & Minors

krikoya is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Registration requires users to confirm their date of birth, and krikoya may request identity documents at any stage to verify that a player meets the minimum age requirement.

If krikoya discovers or is notified that an account has been registered by an individual under 18 years of age, the account will be immediately suspended, all associated funds will be frozen, and the relevant personal data will be reviewed and handled in accordance with our data breach and compliance procedures. Any winnings accumulated by an underage player will be void and forfeited.

If you are a parent or guardian and believe that a minor in your care has registered on krikoya, please contact support@krikoya immediately. We will investigate the matter promptly and take the appropriate action.

Policy Updates & Contact

krikoya reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, we will notify registered players via their registered email address and update the effective date at the top of this document. We encourage all players to review this Privacy Policy periodically.

Your continued use of krikoya following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the platform and request account closure via support@krikoya.

How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data krikoya holds about you, please reach out to our support team using the contact details below. All privacy-related enquiries are handled with priority and discretion.

• Email: support@krikoya (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Support hours: 24/7, 00:00 to 23:59 Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 days.