Kirekiya Privacy Policy

01Overview and Scope

This Privacy Policy applies to all users of kirekiya.com and the kirekiya mobile app, including registered players, visitors who browse without an account, and anyone who contacts kirekiya through any channel. It covers all personal data that kirekiya collects, processes, stores, and shares in connection with the operation of the platform.

Kirekiya is committed to handling your personal data responsibly. We collect only what we need, use it only for the purposes described in this policy, and protect it with industry-standard security measures. This policy is written in plain language so every kirekiya user — whether you are in Dhaka, Chittagong, Sylhet, or anywhere else in Bangladesh — can understand exactly how your data is handled.

This Privacy Policy should be read alongside kirekiya's Terms and Conditions and Responsible Gaming policy, both of which are incorporated by reference.

02What Data Kirekiya Collects

Kirekiya collects personal data in two ways: information you provide directly when you register or use the platform, and information collected automatically when you interact with kirekiya's systems.

Information you provide directly to kirekiya:

• Full name and date of birth (required for age verification).
• Mobile phone number linked to your bKash, Nagad, or Rocket account.
• Username and password for your kirekiya account.
• Identity documents submitted during verification (national ID, passport, or driving licence).
• Communications you send to kirekiya support, including chat logs and emails.

Information collected automatically when you use kirekiya:

• Device information — type, operating system, browser version, and unique device identifiers.
• IP address and approximate geographic location.
• Session data — pages visited, time spent, clicks, and navigation paths on kirekiya.
• Transaction history — deposits, withdrawals, bets placed, and game results.
• Cookie and tracking data (see the Cookies section below).

The table below summarises the main categories of data kirekiya collects and the legal basis for processing each:

03How Kirekiya Uses Your Data

Kirekiya uses the personal data we collect to operate the platform, keep it secure, and improve the experience for every player. We do not use your data for purposes beyond what is described in this policy without first obtaining your consent.

• Account management: Creating and maintaining your kirekiya account, verifying your identity, and processing your login credentials.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, and Rocket using the mobile number registered on your kirekiya account.
• Fraud prevention and security: Detecting and preventing unauthorised access, multiple account creation, bonus abuse, and money laundering on the kirekiya platform.
• Regulatory compliance: Meeting our obligations under applicable laws, including age verification, anti-money laundering (AML) checks, and responding to lawful requests from authorities.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of kirekiya's support services.
• Platform improvement: Analysing how players use kirekiya to fix bugs, improve game performance, and develop new features.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying the responsible gaming tools you have activated on your kirekiya account.
• Marketing communications: Sending you promotional offers and updates about kirekiya — only if you have opted in to receive them. You can opt out at any time.

04Data Sharing and Disclosure

Kirekiya does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

• Payment providers: Kirekiya shares your mobile number and transaction details with bKash, Nagad, and Rocket solely to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Identity verification services: When you submit identity documents for KYC verification, kirekiya may use a third-party verification service to confirm the authenticity of those documents. Your documents are not stored by the verification provider beyond the time needed to complete the check.
• Technology and infrastructure providers: Kirekiya uses cloud hosting, analytics, and security services to operate the platform. These providers process data on kirekiya's behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory and law enforcement authorities: Kirekiya will disclose personal data to government authorities, regulators, or law enforcement agencies when required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event that kirekiya undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this policy will continue to apply.

05Cookies and Tracking

Kirekiya uses cookies and similar tracking technologies to make the platform work correctly, remember your preferences, and understand how players use the site. A cookie is a small text file stored on your device when you visit kirekiya.com.

Kirekiya uses the following types of cookies:

• Essential cookies: Required for kirekiya to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without disabling kirekiya entirely.
• Analytics cookies: Help kirekiya understand how players navigate the platform — which pages are most visited, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: Remember your settings on kirekiya, such as your preferred language and display options, so you don't have to re-enter them every visit.
• Marketing cookies: Used only if you have consented to receive personalised promotions from kirekiya. These cookies help us show you offers that are relevant to your activity on the platform.

You can manage your cookie preferences through your browser settings or the cookie consent tool on kirekiya.com. Withdrawing consent for non-essential cookies will not affect your ability to use the core kirekiya platform.

06Data Security

Kirekiya takes the security of your personal data seriously. We implement technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• All data transmitted between your device and kirekiya's servers is encrypted using TLS 1.3.
• Stored personal data is encrypted at rest using AES-256 encryption.
• Kirekiya's systems are protected by firewalls, intrusion detection systems, and regular security audits.
• Access to personal data within kirekiya is restricted to staff who need it to perform their job functions, and all access is logged and monitored.
• Kirekiya conducts regular penetration testing and vulnerability assessments to identify and address security weaknesses.

Despite these measures, no system is completely immune to security threats. If kirekiya becomes aware of a data breach that affects your personal data, we will notify you as soon as reasonably practicable and take immediate steps to contain and remediate the breach.

07Data Retention

Kirekiya retains your personal data for as long as your account is active and for a period of five years after account closure. This retention period is required to comply with anti-money laundering regulations, resolve disputes, and respond to regulatory inquiries.

Specific retention periods for different categories of data:

• Account and identity data: Retained for five years after account closure.
• Transaction records: Retained for five years in accordance with financial record-keeping requirements.
• Support communications: Retained for two years after the last interaction.
• Analytics and session data: Retained in anonymised form for up to 24 months.
• Marketing preferences: Retained until you withdraw consent or close your account.

After the applicable retention period, kirekiya will securely delete or anonymise your personal data so that it can no longer be linked to you.

08Your Privacy Rights

As a kirekiya user, you have the following rights over your personal data. To exercise any of these rights, contact kirekiya at [email protected] with the subject line "Privacy Request". We will respond within 30 days.

• Right to access: You can request a copy of all personal data kirekiya holds about you.
• Right to correction: You can ask kirekiya to correct any inaccurate or incomplete personal data on your account.
• Right to deletion: You can request that kirekiya delete your personal data. Note that we may be required to retain certain data for legal and regulatory reasons even after a deletion request.
• Right to restrict processing: You can ask kirekiya to stop processing your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format so you can transfer it to another service.
• Right to withdraw consent: Where kirekiya processes your data based on consent (such as for marketing), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to object: You can object to kirekiya processing your data for direct marketing purposes at any time.

09Children and Minors

Kirekiya is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on kirekiya or provided us with personal data, please contact us immediately at [email protected]. We will investigate and, if confirmed, delete the account and all associated data without delay.

Kirekiya uses age verification checks during registration and may request identity documents at any time to confirm that a player meets the minimum age requirement. Any account found to belong to a person under 18 will be closed immediately and any funds will be returned to the payment source after verification.

10Changes to This Policy

Kirekiya may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via the mobile number or email address on their kirekiya account, and post the updated policy on this page with a revised effective date.

We encourage you to review this page periodically. Continued use of kirekiya after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using kirekiya and contact us to close your account.

11Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kirekiya handles your personal data, please get in touch with our privacy team:

• Email: [email protected] (subject: "Privacy Request")
• Live chat: Available 24/7 from your kirekiya account dashboard.
• Response time: Privacy requests are acknowledged within 48 hours and resolved within 30 days.

Kirekiya is committed to resolving privacy concerns fairly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.