Your Privacy at krikay

Overview & Scope

This Privacy Policy ("Policy") is published by krikay ("krikay", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("you", "player", "user") who access or use the krikay platform located at krikay.bid, including all associated services, account features, and communication channels.

By registering for a krikay account or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read, understood, and consented to the data practices described in this document. If you do not agree to this Policy, you should cease use of the krikay platform and may request closure of your account by contacting us at [email protected].

This Policy should be read in conjunction with the krikay Terms & Conditions, which together form the complete agreement governing your relationship with krikay. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to the handling of personal data, this Policy shall prevail.

Personal Data We Collect

krikay collects personal data in several categories depending on the nature of your interaction with the platform. The categories of personal data we collect include, but are not limited to, the following:

krikay does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) except where the submission of an identity document incidentally reveals such information in the course of mandatory KYC verification. In such cases, the data is used solely for the purpose of identity confirmation and is not stored or processed for any other purpose.

How We Collect Your Data

krikay collects personal data through the following means:

• Direct submission: Data you actively provide when registering a krikay account, completing the identity verification process, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the krikay platform. This data is collected regardless of whether you are logged into an account;
• Payment processors: Financial transaction data received from mobile financial service providers including bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal via those services;
• Identity verification partners: In some cases, krikay may use third-party identity verification services to cross-reference the data you submit during KYC. These partners operate under strict data processing agreements with krikay;
• Fraud prevention systems: Data from fraud detection tools and device fingerprinting services used to protect the integrity of the krikay platform and safeguard player accounts.

Purpose of Data Processing

krikay processes your personal data for a defined set of purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which krikay processes personal data are as follows:

• Account management: To create, maintain, and administer your krikay player account, including authentication, password resets, and account preference management;
• Identity verification: To verify your identity and age in compliance with responsible gaming obligations and to prevent underage gambling and fraudulent account creation;
• Payment processing: To process deposits and withdrawals via supported Bangladeshi payment methods, reconcile transactions, and maintain accurate financial records;
• Platform operation and improvement: To deliver, maintain, and continuously improve the krikay platform, including personalising the game lobby, detecting technical errors, and optimising platform performance;
• Responsible gaming monitoring: To monitor gameplay patterns for indicators of problem gambling behaviour, enforce self-exclusion orders and deposit limits, and comply with our responsible gaming commitments;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the krikay Terms & Conditions;
• Customer support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and training purposes;
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw consent at any time by contacting [email protected].

Legal Basis for Processing

krikay processes your personal data on one or more of the following legal bases depending on the specific processing activity in question:

• Contractual necessity: Processing that is necessary for krikay to perform its obligations under the agreement with you, including account creation, transaction processing, and customer support;
• Legitimate interests: Processing carried out in pursuit of krikay's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental data protection rights;
• Consent: Processing activities for which krikay has obtained your prior consent, most notably the sending of marketing and promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing;
• Legal obligation: Processing necessary to comply with applicable legal requirements, such as retaining financial transaction records for the period required by law.

Data Sharing & Disclosure

krikay does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share personal data with specific categories of third parties where necessary and in accordance with this Policy:

• Game technology providers: Studios such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi may receive session and gameplay data necessary to deliver their games within the krikay platform. These providers act as data processors and are contractually bound to process data only on krikay's instructions;
• Payment service providers: Financial data is shared with mobile financial service operators including bKash, Nagad, Rocket, and Upay solely to the extent required to process your transactions;
• Identity verification services: Where a third-party KYC or age verification provider is used, your identity documentation and related data may be shared with that provider for verification purposes only;
• Fraud prevention and security vendors: Technical and usage data may be shared with specialised fraud detection and cybersecurity service providers to protect the platform and its users;
• Legal and regulatory authorities: krikay may disclose personal data where required to do so by applicable law, court order, or regulatory authority. In such cases, krikay will disclose only the minimum information required to comply with the legal obligation;
• Business transfers: In the event that krikay undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, personal data held by krikay may be transferred to the relevant successor entity, subject to equivalent data protection obligations being imposed on the recipient.

All third parties with whom krikay shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.

Data Retention

krikay retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as may be required to comply with applicable legal obligations or to resolve disputes. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status on the krikay platform;
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in line with standard financial record-keeping requirements;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later;
• Customer support communications: Retained for a period of two (2) years from the date of the most recent communication in a support thread;
• Self-exclusion records: Retained for a minimum of five (5) years to prevent re-registration by a self-excluded player during the active exclusion period;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified or identifiable individual.

Data Security

krikay implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the krikay platform;
• Encryption at rest for sensitive personal data stored in krikay's databases;
• Role-based access controls ensuring that only authorised personnel have access to personal data, strictly limited to what is necessary for their role;
• Regular security assessments and vulnerability testing of the krikay platform and infrastructure;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access;
• Monitoring systems designed to detect and respond to suspicious access patterns and potential data breaches in real time.

Whilst krikay takes all reasonable steps to protect your personal data, no transmission of data over the internet or electronic storage system can be guaranteed to be fully secure. You are responsible for maintaining the confidentiality of your krikay account credentials and for ensuring that the device you use to access the platform is adequately secured. If you have reason to believe that your krikay account has been compromised, please contact [email protected] immediately.

Cookies & Tracking Technologies

krikay uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, remember your preferences, and gather analytical data about platform usage. The categories of cookies used by krikay include the following:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without disrupting core platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings and game lobby display options, to personalise your krikay experience;
• Analytical cookies: Collect aggregated, anonymised data about how players navigate and use the krikay platform. This data helps krikay improve the platform's design and content;
• Fraud detection cookies: Used to identify unusual or suspicious activity patterns that may indicate fraudulent behaviour or unauthorised account access.

You may configure your browser settings to block or delete cookies at any time. However, please note that disabling certain categories of cookies may affect the functionality of the krikay platform, including your ability to maintain a logged-in session. Detailed cookie settings can typically be managed through the preferences or privacy section of your web browser.

Your Data Rights

As a krikay player, you hold a number of rights with respect to the personal data that krikay holds about you. These rights are summarised below. To exercise any of these rights, please submit a written request to [email protected] from the mobile number or email address associated with your krikay account:

• Right of access: You have the right to request a copy of the personal data that krikay holds about you and to receive information about how that data is being processed;
• Right to rectification: You have the right to request that krikay correct any inaccurate or incomplete personal data held about you without undue delay;
• Right to erasure: In certain circumstances, you have the right to request that krikay delete your personal data. This right is subject to krikay's legal obligations to retain certain categories of data for defined minimum periods as outlined in Section 7 of this Policy;
• Right to restriction: You may request that krikay restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of krikay's legitimate grounds;
• Right to object: You have the right to object to the processing of your personal data where that processing is based on krikay's legitimate interests. krikay will cease processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where krikay processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

krikay will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further two months, in which case krikay will notify you of the extension and the reasons for it within the initial thirty-day window.

Minors & Age Restriction

The krikay platform is strictly intended for use by individuals aged 18 years or older. krikay does not knowingly collect, store, or process personal data from individuals under the age of 18. If krikay discovers or is notified that personal data has been submitted by or on behalf of a minor, the associated account will be immediately suspended, all balances will be forfeited, and the personal data will be deleted from krikay's systems as promptly as practicable.

If you are a parent or guardian and believe that a person under 18 in your care has registered for a krikay account, please contact us immediately at [email protected] so that we can take the necessary action. We encourage parents and guardians to make use of parental control software to restrict access to gambling platforms on devices used by minors.

Changes to This Policy

krikay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the krikay platform. When material changes are made to this Policy, krikay will take reasonable steps to bring the updated Policy to the attention of registered players, which may include an in-account notification or a prominent notice on the krikay homepage.

The "Last updated" date displayed at the top of the sidebar and the foot of this section reflects the date on which the most recent version of this Policy came into effect. Your continued use of the krikay platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically so that you remain informed of the current terms governing the processing of your personal data.

This Privacy Policy was last reviewed and updated in July 2026.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which krikay processes your personal data, please contact the krikay data protection team using the details below. We aim to respond to all privacy-related enquiries within 30 days of receipt.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Privacy Policy Enquiry — [your account mobile number]
• Response time: Within 30 days of receipt
• Support hours: 24 hours a day, 7 days a week
• Platform: krikay.bid

For all data rights requests (access, rectification, erasure, restriction, or objection), please include your full name and the mobile number associated with your krikay account so that we can verify your identity before processing the request.