kkriya Privacy Policy

1 About This Policy

This Privacy Policy applies to all personal data collected by kkriya through the operation of the https://kkriya.bid website, including account registration, login sessions, deposits and withdrawals, gameplay activity, promotional participation, and customer support interactions.

By registering a player account or continuing to use the kkriya platform, you acknowledge that you have read and understood this Privacy Policy. This document should be read alongside the kkriya Terms & Conditions, which govern the broader relationship between you and the platform.

kkriya may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The "Last Revised" date at the top of this page will be updated whenever a change is made. Where a change is material, we will notify registered players via the email address on their account before the change takes effect.

2 Data We Collect

kkriya collects the following categories of personal data, limited to what is necessary for the purposes described in Section 5 of this Policy:

2.1 Identity Data

Full legal name, date of birth, nationality, and a copy of a government-issued photo identification document (such as a National Identity Card or passport) collected during KYC verification.

2.2 Contact Data

Email address, mobile phone number, and residential address in Bangladesh, provided at registration and updated by you through your account settings.

2.3 Financial Data

Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details where applicable, transaction histories including deposit amounts, withdrawal amounts, and timestamps. kkriya does not store full card numbers — card transactions are tokenised by the payment processor.

2.4 Account & Activity Data

Username, encrypted password hash, account creation date, login timestamps, session durations, games played, bets placed, bet outcomes, bonus claims, and responsible gaming tool settings.

2.5 Technical Data

IP address, browser type and version, operating system, device type and identifier, screen resolution, referring URL, and approximate geolocation derived from IP address.

2.6 Communications Data

Records of emails, live chat transcripts, and any other communications exchanged between you and the kkriya support team, retained for quality assurance and dispute resolution purposes.

3 How We Collect Your Data

kkriya collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you access the kkriya platform, including via browser cookies, session tokens, and server-side access logs. See Section 7 for full cookie details.
• Third-party sources: Identity and address verification data received from KYC service providers; payment confirmation data received from mobile wallet processors (bKash, Nagad, Rocket, Upay) and card payment gateways; fraud-screening signals from risk management partners.

kkriya does not purchase personal data from data brokers or obtain personal data from social media platforms without your explicit consent.

4 Legal Basis for Processing

kkriya processes your personal data on the following legal grounds:

Where kkriya relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your rights and freedoms, taking into account the nature of the data and the reasonable expectations of players using a regulated online platform.

5 How We Use Your Data

kkriya uses collected personal data strictly for the following purposes:

• To create, verify, and maintain your player account on the kkriya platform.
• To process deposits and withdrawals in Bangladeshi Taka via your chosen payment methods.
• To verify your identity and age (18+) in accordance with responsible gaming obligations.
• To detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct described in the kkriya Terms & Conditions.
• To send transactional communications such as deposit confirmations, withdrawal notifications, password reset emails, and account security alerts.
• To send promotional communications — including bonus offers, tournament announcements, and seasonal promotions — where you have provided explicit opt-in consent. You may withdraw this consent at any time via your account settings.
• To administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• To analyse platform usage patterns in aggregated, anonymised form for the purpose of improving game selection, site performance, and user experience.
• To resolve disputes, respond to complaints, and maintain records required by applicable law.

kkriya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis.

6 Sharing Your Data

kkriya does not sell, rent, or trade personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the specified purpose:

6.1 Payment Processors

Mobile wallet providers (bKash, Nagad, Rocket, Upay) and card payment processors receive transaction data necessary to authorise deposits and process withdrawal requests. These parties act as independent data controllers for their own services and are governed by their own privacy policies.

6.2 Identity Verification Providers

Third-party KYC and anti-money laundering service providers may receive copies of identity documents and personal information for the purpose of verifying player identities. These providers are engaged under data processing agreements and are prohibited from using your data for any purpose other than identity verification.

6.3 Game Providers

Where you play a game powered by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token and anonymised player identifier is shared with that provider to enable gameplay. Personal data such as your name or contact details is not transmitted to game providers.

6.4 Fraud and Security Partners

Risk management and fraud prevention partners may receive technical data (IP address, device fingerprint, behavioural signals) for the purpose of detecting and preventing fraud, bot activity, and account takeover. These partners process data as instructed processors under binding agreements.

6.5 Legal and Regulatory Disclosure

kkriya may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law or where disclosure is necessary to protect the rights, property, or safety of kkriya, its players, or third parties. Where legally permissible, kkriya will notify you of any such disclosure.

7 Cookies & Tracking Technologies

The kkriya platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are required for the platform to function. They enable session management, authentication, CSRF protection, and load balancing. These cookies cannot be disabled without impairing core platform functionality. No consent is required for strictly necessary cookies.

7.2 Performance & Analytics Cookies

These cookies collect anonymised data about how players use the platform — which pages are visited most frequently, how long sessions last, and where errors occur. This information is used to improve platform performance and game selection. These cookies are activated only with your consent.

7.3 Functional Cookies

These cookies remember your platform preferences such as display language, currency format, and preferred payment method, so that you do not need to re-enter them on each visit. These cookies are activated only with your consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling non-essential cookies will not affect your ability to place bets, deposit, or withdraw funds on the kkriya platform.

8 International Data Transfers

kkriya's primary servers are located in data centres that serve the South and South-East Asian region. In certain circumstances — for example, when using a globally operated KYC provider or game studio — personal data may be processed on servers located outside Bangladesh.

Where data is transferred internationally, kkriya ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections described in this Privacy Policy. Safeguards may include contractual data protection clauses binding the recipient to specific security and privacy obligations.

By registering an account on the kkriya platform, you acknowledge and consent to the international transfer of your data in the circumstances described above, subject to the safeguards set out in this section.

9 Data Retention Periods

kkriya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to any individual. Anonymised, aggregated data (such as statistical reporting data) may be retained indefinitely as it no longer constitutes personal data.

10 Your Privacy Rights

As a kkriya player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". kkriya will respond within 30 days of receipt.

Please note that certain rights — particularly erasure — may be limited where kkriya is required to retain data to comply with a legal obligation (for example, anti-money laundering record-keeping requirements). In such cases, kkriya will explain the specific limitation that applies to your request.

11 Children's Privacy

The kkriya platform is strictly intended for adults aged 18 and above. kkriya does not knowingly collect or process personal data belonging to any person under the age of 18. Age verification is conducted as part of the account registration process, and additional KYC checks may be performed where there is reasonable doubt about a player's age.

If kkriya becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately closed, all associated data will be deleted as soon as legally permissible, and any deposited funds will be returned to the original payment source following verification. If you believe that a minor has registered on the kkriya platform, please contact us immediately at [email protected].

12 Security Measures

kkriya implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport security: All connections to https://kkriya.bid are encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Storage encryption: Sensitive data fields — including password hashes, national ID numbers, and payment method identifiers — are encrypted at rest using industry-standard cryptographic algorithms.
• Access controls: Internal access to personal data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to periodic audit.
• Two-factor authentication: kkriya supports two-factor authentication (2FA) for player accounts and enforces it for all internal administrative access.
• Intrusion detection: Automated monitoring systems scan for unusual access patterns, brute-force attempts, and known attack signatures, with alerts triggering immediate investigation.
• Incident response: kkriya maintains a data breach response plan. In the event of a breach affecting your personal data, we will notify you within 72 hours of becoming aware of the breach, consistent with applicable data protection standards.

While kkriya takes all reasonable precautions to secure your personal data, no internet-based system can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials and should use a strong, unique password and enable 2FA where available.

13 Third-Party Links

The kkriya platform may contain references to third-party services — such as payment providers or game studios — whose own websites or services operate independently of kkriya. This Privacy Policy applies solely to data processed by kkriya through the https://kkriya.bid platform. kkriya is not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third party whose services you use in connection with your kkriya account.

14 Updates to This Privacy Policy

kkriya reserves the right to update this Privacy Policy at any time. When we do, the "Last Revised" date at the top of this page will be updated to reflect the date of the most recent revision. For material changes — meaning changes that significantly affect how we collect or use your personal data — we will provide advance notice to registered players via the email address on their account, no fewer than 14 days before the change takes effect.

Your continued use of the kkriya platform after a Privacy Policy update takes effect constitutes your acceptance of the revised policy. If you do not agree with any revised terms, you should discontinue use of the platform and request account closure by contacting our support team.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kkriya, please contact our support team using the details below. The email address is provided as plain text — please copy it manually into your email client.