Privacy Policy of krikrya

Information We Collect

krikrya collects personal data from you in several ways: directly when you register an account or interact with our services, automatically when you browse or use our platform, and occasionally from trusted third-party sources as part of our identity verification and fraud prevention obligations. We collect only the data that is necessary and proportionate to the purpose for which it is being processed.

The categories of personal data we collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity photographs required for KYC), or medical records. If you voluntarily disclose such information in a support communication, it will be handled with the highest level of care and will not be processed for any other purpose.

How We Use Your Data

krikrya uses the personal data we collect for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account Management: To create, maintain, and administer your krikrya player account, including processing deposits and withdrawals, tracking your balance, and recording your betting and gaming activity.
• Identity and Age Verification: To verify that you are at least 18 years of age and to confirm your identity as required by our Know Your Customer (KYC) obligations before processing withdrawals or activating certain account features.
• Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions on your account.
• Customer Support: To respond to your queries, complaints, disputes, and requests submitted via email or live chat, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct, and to protect the integrity of the krikrya platform and all its players.
• Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, responsible gaming obligations, and requests from law enforcement or regulatory authorities.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about bonuses, promotions, new games, and platform updates. You may withdraw your marketing consent at any time by contacting support@krikrya.
• Platform Improvement: To analyse usage patterns, test new features, troubleshoot technical issues, and continuously improve the quality, performance, and security of krikrya.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling and to apply responsible gaming tools — such as deposit limits, time-outs, and self-exclusion — where appropriate.

Legal Basis for Processing

krikrya processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely to process different categories of your data are as follows:

• Contractual Necessity: The majority of data processing at krikrya is necessary for the performance of the contract between you and us — that is, the Terms & Conditions you accept when you register your account. This includes processing your identity, contact, financial, and account data to provide you with betting and gaming services.
• Legal Obligation: Certain processing activities — particularly identity verification, AML transaction monitoring, and the retention of financial records — are required by applicable law. We process your data in these circumstances to fulfil our legal obligations, regardless of your consent.
• Legitimate Interests: We process technical and usage data for fraud detection, platform security, and service improvement on the basis of our legitimate interests as a business, provided those interests are not overridden by your rights and interests.
• Consent: Where we process your data for marketing purposes or for the placement of non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

Cookies and Tracking Technologies

krikrya uses cookies and similar tracking technologies — including pixels, local storage objects, and session tokens — to operate and improve the platform, remember your preferences, and analyse how players interact with our website. This section explains what types of cookies we use and how you can manage them.

You can manage or disable non-essential cookies through your web browser's settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for future cookie placement. Please note that disabling certain cookies may affect the functionality of krikrya — for example, you may be required to log in each time you visit the site if session cookies are blocked.

krikrya does not use cookies or tracking technologies to build advertising profiles for third-party marketing networks. Analytics data collected via cookies is used exclusively for internal platform improvement and is not shared with external advertising platforms.

Data Sharing and Disclosure

krikrya does not sell, rent, or trade your personal data to any third party. We may share your data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment Processors: To process deposits and withdrawals, we share necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and card networks (Visa/Mastercard). These providers operate under their own data protection policies and are contractually bound to process your data only for payment purposes.
• Identity Verification Providers: To fulfil our KYC obligations, we may share identity documents with accredited identity verification service providers. These providers process your data under strict confidentiality and data protection obligations.
• Game Providers: When you play games powered by third-party providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt — certain technical data (such as session IDs and game results) may be processed by those providers to deliver the game. No additional personal data beyond what is technically necessary is shared with game providers.
• Fraud Prevention and Security Services: We may share data with specialist fraud detection and anti-money laundering service providers to protect the platform and comply with legal obligations.
• Law Enforcement and Regulatory Authorities: We will disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, valid legal process, or court order. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event that krikrya undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

Data Retention

krikrya retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply to different categories of data are outlined below.

• Account and Identity Data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five years from the date of the relevant transaction, as required for AML compliance and financial record-keeping.
• Betting and Gaming History: Retained for a minimum of three years following the relevant activity, for dispute resolution and regulatory compliance purposes.
• Support Communications: Retained for two years from the date of the support interaction, to facilitate resolution of any subsequent disputes or complaints.
• Marketing Consent Records: Retained for the duration of your account and for one year following the withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to two years for platform analytics and improvement purposes. Raw IP and device logs are retained for a maximum of 12 months.

When personal data is no longer required for any active purpose and the applicable retention period has expired, krikrya will securely delete or permanently anonymise that data. Where anonymisation is not technically feasible, data will be securely archived and access will be restricted.

Data Security

krikrya takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and krikrya is encrypted using industry-standard TLS/SSL protocols, ensuring that your personal and financial information cannot be intercepted during transmission.
• Access Controls: Access to personal data within krikrya's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific role, and all access is logged and audited.
• Secure Server Infrastructure: krikrya's data is stored on secure, access-controlled servers protected by firewalls, intrusion detection systems, and regular security patching.
• Password Hashing: Player account passwords are stored using one-way cryptographic hashing. krikrya staff cannot view your password in plain text — if you forget your password, it must be reset, not retrieved.
• Fraud Monitoring: Our platform continuously monitors account activity for suspicious patterns — including unusual login locations, rapid transaction sequences, and atypical betting behaviour — and flags accounts for review where anomalies are detected.
• Staff Training: All krikrya staff with access to personal data receive regular training on data protection obligations, secure data handling practices, and the requirements of this Privacy Policy.

While krikrya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to take their own precautions — including using a strong, unique password for their krikrya account and not sharing login credentials with anyone. If you suspect that your account has been compromised, contact support@krikrya immediately.

Your Privacy Rights

As a player registered on krikrya, you have a number of rights in respect of the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please submit a written request to support@krikrya. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of Access: You have the right to request a copy of all personal data that krikrya holds about you, along with information about how it is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. We will action all reasonable rectification requests promptly.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you have the right to request the deletion of your personal data. Note that we may be required to retain certain data by law even if you request erasure.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

Third-Party Services

krikrya integrates with a number of trusted third-party services to deliver payment processing, game content, identity verification, and platform analytics. Each of these integrations involves a degree of data sharing, which is governed by contractual data protection agreements between krikrya and the relevant provider.

The key third-party services currently integrated with krikrya, and the data they process, are as follows:

• Payment Processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): These providers receive the minimum financial data necessary to process your deposit or withdrawal transaction. Each provider operates under its own privacy policy and data protection framework. krikrya does not store full card numbers — only masked card references are retained for transaction history purposes.
• Game Providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt): When you launch a game powered by one of these providers, a session token and anonymised player identifier are passed to the provider's servers to initialise and record your gaming session. No additional personal data such as your name, email address, or payment details is shared with game providers.
• Identity Verification Services: To fulfil our KYC obligations, krikrya uses accredited identity verification partners. These partners may process your name, date of birth, identity document images, and facial photographs solely for the purpose of verifying your identity. Verification data is not retained by these partners beyond the period required to complete the verification process.
• Analytics Providers: krikrya uses internal analytics tools to track platform usage, page performance, and user journey data. Any analytics data processed is anonymised or pseudonymised and is not linked back to individual player identities for external reporting purposes.
• Fraud Prevention Services: Specialist fraud detection providers may process technical data — including IP addresses, device fingerprints, and behavioural signals — to identify and prevent fraudulent activity. This processing is carried out on the basis of our legitimate interests in maintaining a safe and fair platform.

krikrya does not integrate with third-party social media platforms in a way that shares your personal data with those platforms. Links to external websites from within krikrya are provided for informational purposes only; krikrya is not responsible for the privacy practices of any third-party website. Players are encouraged to review the privacy policy of any third-party service they interact with.

Changes to This Policy

krikrya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When a material change is made to this Policy, we will notify registered players by posting a prominent notice on the krikrya website and, where appropriate, by sending an email notification to the address registered on your account.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. We recommend that all players review this Policy periodically to remain informed of how krikrya collects and uses their personal data. Historical versions of this Policy are available upon written request submitted to support@krikrya.

Your continued use of krikrya following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team at support@krikrya before the effective date of the changes.