Data Protection Policy

Kirikaya Privacy Policy — Our Commitment to Protecting Your Data

Your privacy is our highest priority at kirikaya. On this page, we clearly explain what information we collect, why we collect it, how it is stored, and what your rights are — no complex legal language, just plain Bengali.

Last Updated: 1 January 2026
Language: Bengali (bn-BD)
Applicable: Bangladesh
Quick summary
Your data is never sold
Data secured with SSL encryption
Right to erasure
Full transparency on cookies and tracking
Limited third-party data sharing
256-bit
SSL Encryption
0%
Data sales
24/7
Security Monitoring
72 hours
Data request response

Why trust us?

The Core Principles of kirikaya's Privacy Policy

Highest-Grade Encryption
kirikaya uses the latest 256-bit SSL encryption technology. Every transaction and piece of personal information is fully encrypted — unreadable to anyone outside.
Your Data Is Never Sold — Period
Many platforms sell user data to advertisers. kirikaya never does. Your name, phone number, and email are never sold to any third party.
Your data, under your control
You can view, correct, or request deletion of your stored data at any time. kirikaya responds within 72 hours.
Regular security audits
kirikaya's systems are regularly audited by third-party security experts. Any vulnerabilities identified are resolved promptly to keep your data protected.
Transparent Cookie Policy
We are clear about which cookies are used and why. You can disable any non-essential cookies at any time.
Full transparency in Bengali
kirikaya believes every Bangladeshi member has the right to understand the privacy policy in their own language. That is why the entire policy is written in plain Bengali.

1. Introduction & Applicability

Welcome to kirikaya.com. This privacy policy explains how kirikaya collects, uses, stores, and protects your personal data. By using our website or mobile app, you are agreeing to the terms of this policy.

Kirikaya is an internationally licensed online gaming platform built specifically with Bangladeshi players in mind. We believe your personal data belongs to you — which is why we are fully transparent about how it is handled.

This privacy policy applies to all kirikaya services, including the website, mobile application, live chat, and email communications. If you navigate to a third-party site via an external link, that site's own privacy policy will apply.

This policy was last updated on 1 January 2026. For any questions, contact us at support@kirikaya.com.

2. What Information Do We Collect?

Kirikaya only collects information that is necessary to provide you with the best possible service. Requesting unnecessary data goes against our policy.

2.1 Information You Provide Directly

  • Identity information: Full name, date of birth, national ID number (for KYC verification).
  • Contact information: Email address, mobile number, home address.
  • Account Information: Username, password (hashed), security questions.
  • Financial information: Payment methods (bKash, Nagad, Rocket numbers) and transaction history.
  • KYC documents: National ID photo, proof of address (required for withdrawals above a certain amount).

2.2 Automatically Collected Information

  • Device Information: IP address, browser type and version, operating system.
  • Usage data: Page visits, click patterns, and session duration.
  • Location information: At the country and city level only (not your precise location).
  • Cookies & Tracking: Session cookies, performance cookies (see Section 6 for details).

Kirikaya never stores your full payment card number or bank PIN. Payment gateway details are sent directly to the payment provider in encrypted form.

2.3 Information we do not collect

Data type Collected? Reason
Full card number No Payment gateway managed directly
Social Media Passwords No Not required
Precise GPS location No Country-level data is sufficient
Health or religious information No Not relevant to service delivery

3. Purpose of data use

Kirikaya uses your data only for specified purposes. It is never used for any unauthorized purpose.

  • Account Management: To secure registration, login, password reset, and account protection.
  • Payment processing: To process deposits and withdrawals securely and to maintain transaction records.
  • Identity Verification (KYC): To comply with legal obligations and prevent fraud.
  • Customer Support: To resolve your questions and complaints promptly.
  • Personalized experience: To recommend games and offers tailored to your preferences.
  • Promotional communications: To inform you of special offers and updates (with your consent).
  • Security Monitoring: To detect unauthorized access, fraud, and money laundering.
  • Legal Compliance: To meet regulatory reporting requirements and fulfill legal obligations.
  • Site improvement: Usage data is analyzed to improve kirikaya's services.

If you no longer wish to receive promotional emails or SMS from kirikaya, click the "Unsubscribe" link at the bottom of any message or let our support team know.

4. Data Sharing — With Whom and Why?

Kirikaya does not sell your data to third parties. However, limited data sharing may occur in certain specific circumstances.

4.1 When information is shared

  • Payment providers: bKash, Nagad, Rocket — only the information necessary to complete the transaction.
  • Identity verification services: Licensed identity verification providers for the KYC process.
  • Legal authorities: When required by a court order or a legitimate request from a regulatory authority.
  • Technology partners: Hosting & cloud providers — they operate in full compliance with our privacy policy.
  • Anti-fraud system: Fraud detection software — used for security purposes only.

4.2 When information is not shared

  • To advertisers or marketing companies.
  • To other gaming platforms.
  • For any commercial purpose without your consent.
  • On social media platforms.

All third parties working with kirikaya are required to comply with our strict data privacy agreements. Any partner found in breach of these agreements is terminated immediately.

5. Data retention & security

Kirikaya applies multiple layers of security to keep your data safe.

5.1 Security measures

  • 256-bit SSL/TLS Encryption: All data transfers are encrypted.
  • Firewall protection: Advanced network firewalls are in place to block unauthorized access.
  • Two-factor authentication (2FA): An extra layer of security at login.
  • Regular backups: Data is regularly stored in encrypted backups.
  • Limited access: Only authorized personnel have access to data on a need-to-know basis.
  • 24/7 monitoring: A dedicated security monitoring team operates around the clock.

5.2 Data Retention Period

Data type Retention period
Account & Identity Information Duration of active account + 5 years
Transaction Records 7 years (legal obligation)
KYC Documents 5 years after account closure
Support conversations 3 years
Browsing logs 90 Days
Marketing Preferences Until consent is withdrawn

After the defined retention period, your data is permanently deleted or fully anonymized — it can no longer be linked to you in any way.

6. Cookie Policy

Cookies are small text files stored in your browser. kirikaya uses cookies to enhance your experience and ensure the platform functions correctly.

6.1 Types of Cookies

Cookie Type Purpose Can it be disabled?
Essential Cookies Login session, security, cart information No (required for the site to function)
Performance Cookies Page load speed, error detection Yes
Functional Cookies Remembering language preferences and theme settings Yes
Analytics Cookies Site usage statistics (anonymized) Yes

6.2 Cookie Controls

You can delete cookies or stop new ones from being saved at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of certain kirikaya features.

Kirikaya does not use any third-party advertising tracking cookies. Your browsing habits are never shared with any advertising network.

7. Your Rights

Every kirikaya member has full rights over their personal data. Your rights are outlined in detail below.

1
Right to access
You have the right to know what information kirikaya holds about you and to receive a copy of it.
2
Right to Rectification
If any of your information is inaccurate, you may request a correction. We will act on it within 72 hours.
3
Right to erasure
After closing your account, you can request deletion of your personal data (except where retention is required by law).
4
Right to restrict processing
In certain circumstances, you can request that processing of your data be temporarily suspended.
5
Right to Data Portability
You may request your data in a structured, machine-readable format (CSV/JSON).
6
Right to object
You may object to marketing communications or the processing of your data for specific purposes.

To exercise any of your rights support@kirikaya.comEmail us at the address below with the subject line "Privacy Request". We will respond within 72 hours.

8. Protection of Minors

Kirikaya strictly refrains from providing services to anyone under 18. Age is verified at registration, and KYC documents may be requested in cases of suspicion.

  • Date of birth verification is mandatory at the time of registration.
  • No one under the age of 18 is permitted to register.
  • If it is found that a minor has created an account, the account will be immediately suspended and all associated data will be deleted.
  • Parents or guardians may report concerns about a minor's account by emailing support@kirikaya.com.

If you become aware of any minor using kirikaya, please contact us immediately. We will take swift action.

9. Policy changes

Kirikaya may update this privacy policy as needed. You will be notified before any significant changes take effect.

  • If significant changes are made, you will be notified at your registered email address.
  • You will be notified at least 14 days before any changes take effect.
  • Continued use of kirikaya after any changes have been made will be considered acceptance of the updated policy.
  • Previous versions are kept in our archive and are available upon request.

10. Contact us

For any questions, concerns, or requests regarding our privacy policy, please get in touch with us.

Email
support@kirikaya.com
Live chat
24/7 support in Bengali
Response time
Within 72 hours

Frequently Asked Questions

Most Frequently Asked Questions from Members About the Privacy Policy

No, never. kirikaya does not sell your personal data to any third party. While limited data may be shared for essential services such as payment processing and KYC verification, this is always governed by strict contractual agreements.

Yes, you can request deletion of your data after closing your account. However, transaction records must be retained for up to 7 years due to legal obligations. Email support@kirikaya.com with the subject line "Data Deletion Request".

Only with your consent. During registration, you can choose whether to receive marketing communications. You can also opt out of SMS or email marketing at any time by contacting our support team.

In the event of a security breach, kirikaya will immediately suspend affected accounts and notify users by email. Our security team will investigate the incident and provide a full update within 72 hours. Where applicable, appropriate compensation measures will be taken.

Under international gaming licensing regulations, KYC documents must be retained for up to 5 years after account closure. After this period, all documents are permanently deleted. All records are kept secure on encrypted servers.

Your Data Is Secure — Play Safely Now

Your privacy is our highest priority at kirikaya. Join a safe and trusted platform today.

Register for Free Log In
SSL Secured
Mobile App Available
24/7 Bangla Support
bKash / Nagad / Rocket
বাংলা