kirikiy Privacy Policy

kirikiy collects personal data from you directly when you register an account, use our services, or contact our support team. We also collect certain data automatically when you browse kirikiy.net. The categories of data we collect are described in the table below.

kirikiy processes your personal data for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The primary reasons we process your data are:

• Account creation and management: To register your kirikiy account, verify your identity, authenticate your kirikiy Login sessions, and maintain your account profile and preferences.
• Service delivery: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks; to credit your BDT wallet; to provide access to casino games, sports betting markets, and live dealer tables; and to award and track bonuses and promotions.
• Identity verification and fraud prevention: To verify that you are who you claim to be, to confirm that you are at least 18 years of age, and to detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities on the platform.
• Responsible gaming: To enforce deposit limits, self-exclusion periods, session reminders, and loss limits that you have requested; to monitor gameplay patterns for signs of problem gambling; and to intervene proactively where our systems identify potential harm.
• Customer support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and audit purposes.
• Legal and regulatory compliance: To meet any obligations imposed by applicable Bangladeshi law, including record-keeping requirements, anti-money-laundering (AML) obligations, and responses to lawful requests from competent authorities.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the kirikiy platform's performance, user interface, game selection, and overall player experience.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about kirikiy bonuses, tournaments, and seasonal offers — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your account settings or by contacting [email protected].

kirikiy does not sell, rent, or trade your personal data. We share data only with trusted third parties that are essential to delivering our services, and only to the extent necessary for those specific purposes. All third-party data processors are required to handle your data securely and in accordance with their own published privacy commitments.

Categories of third parties with whom kirikiy may share your data:

• Game Providers: Third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers and game-interaction data necessary to deliver their games and resolve disputes. These providers operate under their own privacy frameworks and data processing agreements with kirikiy.
• Payment processors: To process your BDT deposits and withdrawals, we share the minimum necessary financial and identity data with your chosen payment service — such as bKash, Nagad, Rocket, Upay, and partner banks including BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These processors are bound by their own regulatory obligations under Bangladeshi financial law.
• Identity verification partners: Third-party KYC services may receive copies of your identity documents and photograph solely for the purpose of verifying your age and identity. These partners process data under strict confidentiality obligations.
• Analytics and security providers: Anonymised and aggregated technical data may be processed by trusted analytics and cybersecurity partners to help kirikiy detect fraud, optimise platform performance, and ensure service availability. No personally identifiable information is included in these transfers.
• Legal and regulatory authorities: kirikiy may disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where required to do so by law, or where we believe disclosure is necessary to protect the rights, safety, or property of kirikiy, its players, or the public.

kirikiy uses cookies and similar tracking technologies on kirikiy.net to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with the site. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of cookies used by kirikiy:

kirikiy takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, and destruction.

Security measures in place include:

• SSL/TLS encryption: All data in transit between your device and kirikiy's servers is encrypted using modern SSL/TLS protocols. kirikiy.net enforces HTTPS on all pages.
• Password hashing: Your account password is never stored in plain text. kirikiy uses industry-standard cryptographic hashing algorithms to store password credentials securely.
• Access controls: Access to player data within kirikiy's systems is restricted on a role-based, need-to-know basis. All internal access to player records is logged and auditable.
• Data minimisation: kirikiy stores only the data that is necessary for the purposes described in this policy. Data that is no longer required for operational, legal, or audit purposes is securely deleted or anonymised.
• Incident response: kirikiy maintains a data breach response plan. In the event of a confirmed breach that poses a material risk to players, affected individuals will be notified promptly with details of the incident and recommended protective steps.

How long kirikiy retains your data:

• Active account data is retained for the full duration of your account relationship with kirikiy.
• Transaction records (deposits, withdrawals, wagering history) are retained for a minimum of 5 years from the date of each transaction to meet financial record-keeping best practices.
• Identity verification documents are retained for the duration of your account relationship plus a minimum of 3 years following account closure.
• Support communications are retained for 2 years from the date of the last communication in a support thread.
• Marketing consent records are retained for the period of your consent plus 2 years, to demonstrate compliance in the event of a dispute.

When data reaches the end of its retention period, it is securely deleted from kirikiy's active systems. Anonymised or aggregated data derived from your activity (which cannot be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.

As a kirikiy player, you hold specific rights over your personal data. kirikiy is committed to honouring these rights promptly and without undue obstacle. To exercise any of the rights below, contact our support team at [email protected] with your account username and a clear description of your request. We aim to respond to all data rights requests within 30 days.

kirikiy's services are strictly intended for adults aged 18 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the kirikiy account registration process, and we reserve the right to request documentary proof of age at any stage of the player relationship.

If kirikiy discovers or has reasonable grounds to believe that a registered account belongs to a person under 18 years of age, the following steps will be taken without delay:

• The account will be immediately suspended and all access to the platform blocked.
• Any deposits made by the underage individual will be returned to the payment method used for deposit, net of any amounts already wagered.
• All winnings generated during the period of underage access will be voided and are not payable.
• All personal data associated with the underage account will be securely deleted from kirikiy's active systems as soon as the investigation is complete, except where retention is required for fraud prevention or legal reporting purposes.
• kirikiy will co-operate fully with any lawful investigation or inquiry by Bangladeshi authorities related to the underage account.

kirikiy reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The most current version of this policy will always be accessible at kirikiy.net/privacy-policy and will display the effective date of the latest revision prominently at the top of the document.

For material changes — those that substantively alter how we collect, use, or share your personal data — kirikiy will provide advance notice via email to your registered address and/or via an in-platform notification displayed upon your next kirikiy Login. Where required by applicable law, we will seek your renewed consent before implementing material changes that affect data processed on the basis of consent.

Your continued use of the kirikiy platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised terms. If you do not agree with any updated provision, you should stop using kirikiy and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or kirikiy's data practices, please contact our support team at [email protected]. We are available seven days a week during Bangladesh Standard Time (BST, UTC+6) operational hours and aim to respond to all privacy-related enquiries within 5 business days.

This Privacy Policy was last updated in January 2026. It supersedes all previous versions of the kirikiy Privacy Policy.