kikariya Privacy Policy

01 Information We Collect

kikariya collects personal data from players and platform visitors through a number of channels: directly from you during registration and account management; automatically through your interaction with the kikariya website and platform; and in limited circumstances from third-party service providers where this is necessary to verify your identity or process payments. The categories of data we collect are outlined below.

Registration and account data — When you create a kikariya account, we collect: your full legal name; date of birth; residential address (including city, district, and division in Bangladesh); email address; mobile phone number; and your chosen username. This data is required to establish and maintain your account and to fulfil our Know Your Customer (KYC) obligations.

Identity verification documents — As part of the mandatory KYC process, kikariya collects scanned or photographed copies of government-issued identification documents, which may include your National Identity Card (NID), passport, or birth certificate. In some cases, we may also request a recent utility bill or bank statement as proof of address. These documents are processed and stored in accordance with the security standards described in Section 6 of this Policy.

Financial and transaction data — kikariya records all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, and transaction reference numbers. We do not store full payment credentials such as complete mobile banking PINs. Payment processing is handled through encrypted channels provided by our licensed payment partners.

Gaming and activity data — We collect records of your gaming activity on the kikariya platform, including games played, bet amounts, win/loss outcomes, session durations, and bonus usage. This data is used to maintain fair play, detect prohibited conduct, and comply with our responsible gaming obligations.

Technical and device data — When you access kikariya.com, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This technical data helps us maintain platform performance, detect fraudulent access, and improve the user experience.

Communications data — When you contact kikariya's support team by email or live chat, we retain a record of the communication, including your message content and our response. This allows us to track the resolution of complaints and maintain service quality.

02 How We Use Your Information

kikariya processes your personal data only for lawful, specified purposes. We do not sell your personal data to third parties for their own marketing purposes. The principal purposes for which kikariya uses your data are as follows:

• Account administration: To create, maintain, and manage your kikariya account, process login requests, and update account details as instructed by you.
• Identity verification and KYC compliance: To verify that you are who you say you are, that you are at least 18 years of age, and that you are not subject to any restriction that would prevent you from using the kikariya platform.
• Payment processing: To facilitate deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate financial records.
• Anti-money-laundering and fraud prevention: To monitor transactions and gaming activity for patterns consistent with money laundering, fraud, or other prohibited conduct, in accordance with applicable AML obligations.
• Responsible gaming: To identify players who may be showing signs of problem gambling behaviour and to deliver appropriate responsible gaming interventions, including self-exclusion options and deposit limit prompts.
• Customer support: To respond to your enquiries, resolve disputes, and investigate complaints submitted to the kikariya support team.
• Platform improvement: To analyse aggregate usage data and identify opportunities to improve the performance, security, and game library of the kikariya platform.
• Promotional communications: Where you have opted in to marketing communications, to send you information about relevant kikariya promotions, bonuses, and seasonal offers (such as Eid or BPL cricket season promotions). You may withdraw marketing consent at any time by contacting [email protected].
• Legal compliance: To fulfil kikariya's obligations under applicable international gaming regulations, data protection frameworks, and court orders or regulatory directions that may require disclosure of certain data.

kikariya does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you, without human review. Where automated systems are used to flag unusual account activity, a member of the kikariya compliance team reviews any resulting action before it is taken.

03 Sharing and Disclosure of Data

kikariya may share your personal data with the following categories of third party in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to process kikariya-related data only for the purpose of completing the relevant transaction.
• Identity verification services: Third-party KYC and document verification providers may process your identity documents on kikariya's behalf to confirm your eligibility. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification service.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and relevant session data (such as bet size and game result) to deliver game content and calculate outcomes. These providers do not receive your full name, contact details, or payment information.
• Fraud detection and security vendors: Specialist cybersecurity and fraud analytics providers may process technical data (such as IP addresses and device fingerprints) to identify and prevent fraudulent activity on the kikariya platform.
• Legal and regulatory authorities: kikariya may be legally required to disclose personal data to regulators, law enforcement agencies, or courts of competent jurisdiction, including in connection with AML investigations or court orders. kikariya will notify you of any such disclosure where it is legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of kikariya's business assets, personal data held by kikariya may be transferred to the acquiring entity. We will notify affected players in advance where practicable and inform you of any changes to the privacy arrangements applicable to your data.

All third parties with whom kikariya shares personal data are required to implement appropriate technical and organisational security measures, and to process that data only in accordance with kikariya's documented instructions.

04 Cookies and Tracking Technologies

kikariya uses cookies and similar tracking technologies on the kikariya.com website to ensure the platform functions correctly, to remember your preferences, and to analyse how the site is used. A cookie is a small text file that is placed on your device by a website server. Cookies cannot execute programmes or deliver viruses to your device.

The categories of cookies used by kikariya are as follows:

• Strictly necessary cookies: These are essential for the kikariya website to operate. They manage your login session, maintain your account security state, and remember your language preference. The kikariya platform cannot function correctly without these cookies, and they cannot be disabled.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use kikariya.com — for example, which pages are most visited and where users navigate from. This data helps kikariya improve platform usability and content relevance. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember choices you make on the kikariya platform (such as display preferences or game category filters) to provide a more personalised experience. They do not track your activity across other websites.
• Security cookies: kikariya uses security cookies to detect and prevent fraudulent account access, including session hijacking and credential-stuffing attacks. These cookies are strictly necessary and cannot be disabled.

You can manage or delete non-essential cookies through your browser settings at any time. Please note that disabling performance or functional cookies may affect the usability of certain features of the kikariya platform. Strictly necessary and security cookies cannot be blocked without preventing you from using the platform entirely.

kikariya does not use third-party advertising cookies or cross-site behavioural tracking technologies. No kikariya cookie data is sold to advertising networks.

05 Data Retention and Storage

kikariya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of data held by kikariya:

Upon expiry of the applicable retention period, kikariya will securely delete or anonymise personal data in accordance with industry-standard data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and product improvement purposes.

kikariya stores all personal data on servers located within secure, access-controlled data centres. Where data is transferred internationally to facilitate the provision of services (for example, to a game content provider operating outside Bangladesh), kikariya ensures that appropriate contractual safeguards are in place to protect the data during transit and in storage.

06 Security Measures We Apply

kikariya takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption at rest and in transit: Personal data and KYC documents stored on kikariya's servers are encrypted at rest using AES-256 encryption. All data in transit is protected by TLS 1.3 protocols.
• Access controls: Access to personal data within kikariya's systems is restricted on a strict need-to-know basis. Staff are granted access only to the data categories required for their specific role. All internal access is logged and subject to periodic audit.
• Two-factor authentication: kikariya offers optional two-factor authentication (2FA) for player accounts and mandates 2FA for all staff accessing internal systems containing personal data.
• Penetration testing and vulnerability scanning: kikariya's technical infrastructure undergoes regular penetration testing and automated vulnerability scanning by qualified security personnel to identify and remediate potential weaknesses before they can be exploited.
• Incident response: kikariya maintains a documented data breach incident response plan. In the event of a data breach affecting your personal data, we will notify affected players without undue delay, along with relevant regulatory authorities where required by applicable law.
• Staff training: All kikariya staff who handle personal data receive regular data protection training and are contractually bound by confidentiality obligations that survive the termination of their employment.

While kikariya employs best-practice security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your kikariya account credentials. If you suspect that your account has been accessed without your authorisation, contact the kikariya support team immediately at [email protected].

07 Your Rights Over Your Personal Data

As a kikariya player, you hold a number of rights in relation to the personal data we hold about you. kikariya is committed to honouring these rights promptly and without unnecessary barriers. The rights available to you are described below.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". kikariya will acknowledge your request within 5 business days and fulfil it within 30 days, unless the complexity or volume of requests requires an extension, in which case we will notify you of the extended timeline. kikariya may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party.

Where kikariya declines to fulfil a data rights request (for example, because fulfilling it would conflict with our legal retention obligations), we will provide a written explanation of the reason for the refusal and inform you of any available recourse.

08 Changes to This Privacy Policy

kikariya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, kikariya will notify registered players by email to their registered address and by a prominent notice on the kikariya.com homepage, at least 14 days before the changes take effect.

The effective date of the current version of this Privacy Policy is stated at the top of this document. We encourage you to review this Policy periodically to stay informed about how kikariya protects your personal data. The version number displayed in the header of this document will be incremented each time a material revision is published.

If you have any questions, concerns, or complaints about this Privacy Policy or about how kikariya handles your personal data, please contact our privacy team directly at [email protected]. We are committed to resolving all privacy-related queries promptly and transparently, in line with kikariya's broader commitment to fair, responsible, and player-centric operations throughout Bangladesh.