kriky Privacy Policy

Privacy at a Glance

kriky is committed to handling your personal data responsibly and transparently. The six principles below summarise how we approach data privacy on this platform.

When you register and use kriky, we collect certain categories of personal data. This data is necessary to provide you with a functional, secure, and compliant gambling service tailored to the Bangladesh market.

• Registration data: Your name, mobile number, date of birth, and any other information submitted at the point of account creation. This data is mandatory and cannot be omitted.
• Identity verification data: Copies of government-issued photo identification, proof of address, or other KYC documents that we may request to verify your identity before processing withdrawals or at any point required by our compliance procedures.
• Financial data: Details of deposits and withdrawals, payment method identifiers (such as the last four digits of a card or a registered bKash or Nagad number), transaction history, and balance records. We do not store full card numbers.
• Usage and device data: IP address, device type, browser type and version, operating system, session duration, pages visited, games played, and betting activity logs. This data supports security monitoring and responsible gaming interventions.
• Communications data: Records of messages exchanged with our customer support team, including chat logs, emails, and any feedback or complaint submissions. These records are retained to ensure service quality and dispute resolution.

The personal data we collect is used for the following purposes. We process each category of data only to the extent necessary to fulfil these purposes.

• Account management: To create and maintain your player account, verify your identity, process deposits and withdrawals, and provide access to games and features on the kriky platform.
• Security and fraud prevention: To monitor account activity for suspicious behaviour, detect and prevent fraud, money laundering, and other prohibited conduct, and to protect the security of our systems and other players.
• Responsible gaming: To identify players who may be at risk of problem gambling, to enforce deposit limits and self-exclusion requests, and to intervene when betting patterns suggest a player may need support.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of interactions with our support team to ensure consistent service quality.
• Legal compliance: To comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and any lawful requests from regulatory or law enforcement authorities.
• Service improvement: To analyse aggregated, anonymised usage data to improve Platform performance, identify popular games and features, and enhance the overall player experience for Bangladesh users.

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are as follows.

• Contractual necessity: Processing required to perform the contract between you and kriky — including account creation, payment processing, and game access. Without this processing, we cannot provide the service.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC identity verification, anti-money laundering checks, and age verification requirements that apply to online gambling operators.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud detection, security monitoring, platform analytics, and responsible gaming interventions, where these interests are not overridden by your privacy rights.
• Consent: For optional processing activities such as sending marketing communications and promotional messages via SMS or messaging apps, where we rely on your explicit consent. You may withdraw consent at any time.

kriky does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment processors: We share the payment-related data necessary to process your deposits and withdrawals with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These partners are contractually bound to use your data only for payment processing.
• Game providers: Certain game providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt and Microgaming — may receive session identifiers and game-play data required to operate their games on our platform. These providers do not receive your full name, contact details, or payment information.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect kriky or other players from fraud or serious harm.
• Service providers: We may engage trusted third-party service providers (for example, cloud hosting, analytics, and customer support tools) who process data on our behalf under strict data processing agreements. These providers are not permitted to use your data for their own purposes.

kriky uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and collect analytics data. By using the Platform you consent to our use of cookies as described in this section.

• Essential cookies: Required for the Platform to function correctly. They maintain your login session, remember your language preference, and ensure secure page transitions. These cannot be disabled without breaking core functionality.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and which games attract the most engagement. This data is used only to improve the player experience and is never linked to your identity.
• Preference cookies: Store your platform preferences such as your selected language, display settings, and notification choices so that they persist across sessions without requiring you to reconfigure them each time you log in.
• Security cookies: Support fraud detection and account security by helping kriky identify unusual login patterns, detect automated access attempts, and flag sessions that may indicate account compromise. These are part of our commitment to keeping your account safe.

kriky takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Stored personal data is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data is restricted to kriky staff and authorised contractors who have a legitimate need to access it. All personnel with data access are subject to confidentiality obligations and regular security training.
• Incident response: In the event of a data breach that poses a risk to players, kriky will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. We maintain a documented incident response procedure for this purpose.

While kriky employs robust security practices, no system is entirely immune to risk. We encourage all players to use strong, unique passwords, to enable any available two-factor authentication, and to report any suspicious activity on their account immediately to [email protected].

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply.

• Active account data: Retained for the duration of your account being active and for a period of five years following account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, in line with applicable financial compliance requirements.
• Support communications: Customer support records are retained for two years following the resolution of the relevant enquiry or complaint, to support quality assurance and dispute resolution processes.

As a player on kriky, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request".

kriky's services are strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account without delay.

From time to time kriky may send promotional messages about new games, seasonal offers tied to events like BPL, Eid, or ICC tournaments, and platform updates. All marketing communications are subject to the following conditions.

• Consent-based: We send marketing messages only to players who have opted in to receive them. Consent is obtained at registration or via account settings and may be withdrawn at any time.
• Opt-out mechanism: Every marketing message contains a clear opt-out instruction. You may also update your marketing preferences at any time through your account settings page or by contacting [email protected].
• No third-party marketing: We do not share your contact details with third-party advertisers for their own marketing purposes. Your personal data is never used to build advertising profiles for sale or licence to external parties.

kriky reserves the right to update or amend this Privacy Policy at any time. The revised policy will be published on this page with an updated effective date. Where changes are material — for example, a new category of data collection, a new sharing arrangement, or a change to how long data is retained — we will notify you via the mobile number or contact details registered to your account before the changes take effect.

Your continued use of the kriky Platform after any amendment to this Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the amended policy, you should stop using the Platform and contact [email protected] to request account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the kriky support team. We are committed to responding to all privacy-related enquiries promptly and transparently.