krkeya Privacy
Policy

1 Information We Collect

krkeya collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party partners where necessary to deliver our services.

1.1 Registration & Account Data

When you create a krkeya account, we collect the following information:

• Full legal name as it appears on your National ID Card or passport
• Date of birth (to verify that you meet the 18+ age requirement)
• Email address and mobile phone number registered in Bangladesh
• Preferred login credentials (username and encrypted password)
• Residential address (city, district, and postal code within Bangladesh)
• Currency preference (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request documentary evidence to verify your identity and payment method ownership. This may include:

• Scanned copy or photograph of your National ID Card (NID) or passport
• Proof of address such as a utility bill or bank statement dated within 90 days
• Screenshot or confirmation of your bKash, Nagad, or Rocket account ownership
• Selfie photograph alongside your identity document if biometric verification is required

KYC documents are processed securely and retained only for as long as required by our data retention policy. Documents are never shared with third parties except where legally mandated or where required by our licensed payment processors.

1.3 Financial Transaction Data

When you make deposits or request withdrawals on the krkeya platform, we record transaction details necessary to process and reconcile your account. This includes:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card)
• Transaction reference numbers provided by your payment provider
• Date, time (Bangladesh Standard Time, UTC+6), and status of each transaction

krkeya does not store full card numbers or mobile banking PINs. Payment authentication is handled directly by your payment provider through their own secure systems.

1.4 Gameplay & Betting Data

To operate the platform and ensure game integrity, we log gameplay activity associated with your account. This includes game sessions, bet amounts, outcomes, bonus activity, and interaction with features such as live casino tables, cricket betting markets, slots from providers like Pragmatic Play, PG Soft, and JILI, and crash game results. This data is used for dispute resolution, fair-play auditing, and platform improvement.

1.5 Technical & Device Data

When you access the krkeya platform, our servers automatically collect certain technical data:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session timestamps, pages visited, and interaction patterns within the platform
• Referral source (how you arrived at the krkeya site)

This technical data helps us optimise platform performance, detect fraudulent or bot-driven activity, and ensure the site renders correctly across different devices used by players across Dhaka, Chittagong, Sylhet, and other regions of Bangladesh.

2 How We Use Your Data

krkeya processes your personal data for clearly defined and legitimate purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy without first obtaining your explicit consent.

2.1 Marketing Communications

krkeya may send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, BPL betting specials, or Pohela Boishakh offers), and platform updates. We will only send marketing communications if you have opted in during registration or through your Account Settings. You may withdraw your marketing consent at any time by updating your communication preferences in the Account Settings panel or by writing to [email protected].

3 Data Sharing & Disclosure

krkeya does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, krkeya shares relevant transaction data with your chosen payment provider. This includes mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking institutions (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). Each payment provider operates under its own privacy policy and data protection standards.

3.2 Game Content Providers

Games on the krkeya platform are powered by licensed third-party studios including Pragmatic Play, Evolution Gaming, PG Soft, JILI, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and bet data necessary to deliver game functionality and fair-play certified outcomes. Providers do not receive your full name, NID, or financial details.

3.3 Legal and Regulatory Disclosure

krkeya may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts where we are legally compelled to do so. This includes disclosures related to suspected money laundering, terrorist financing, fraud, or underage gambling investigations. We will disclose only the minimum data required and will notify affected users where legally permissible.

3.4 Technology Service Providers

krkeya works with carefully selected technology partners who assist in operating the platform — including cloud hosting providers, cybersecurity firms, and analytics tools. These partners act as data processors on our behalf and are contractually bound to process your data only according to our instructions and to maintain appropriate security standards.

4 Cookies & Tracking

krkeya uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to understand how players interact with different sections of the site. This section explains what types of cookies we use and how you can manage them.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling essential cookies will prevent you from logging in and using core platform features. The krkeya platform does not use third-party advertising cookies or social media tracking pixels. Your in-session data is not shared with advertising networks.

5 Data Security

krkeya employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Security is not an afterthought at krkeya — it is built into every layer of the platform architecture.

5.1 Technical Safeguards

• All data transmitted between your device and the krkeya platform is encrypted using 256-bit SSL/TLS encryption
• Account passwords are stored using one-way cryptographic hashing — krkeya staff cannot view your password
• Account access is protected by rate-limiting and automated lockout after repeated failed login attempts
• Database servers storing personal data are isolated from public-facing systems and accessible only via authenticated, encrypted internal connections
• KYC documents are stored in encrypted file storage with access restricted to authorised verification personnel only
• All platform activity is monitored by automated intrusion detection systems operating around the clock

5.2 Organisational Safeguards

• Access to personal data is granted on a strict need-to-know basis — customer support agents can view only the minimum data required to assist you
• All staff with access to personal data are trained in data protection best practices and bound by confidentiality obligations
• Third-party service providers are vetted for security standards before being granted any access to platform data
• Security audits and penetration testing are conducted periodically to identify and remediate vulnerabilities

6 Data Retention

krkeya retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

When the applicable retention period expires, krkeya securely deletes or anonymises your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (such as platform-wide usage statistics) may be retained indefinitely for research and improvement purposes.

7 Your Privacy Rights

As a player on the krkeya platform, you have a number of rights with respect to your personal data. krkeya respects these rights and will respond to valid requests within a reasonable timeframe — typically within 30 days of receipt.

7.1 Right to Access

You have the right to request a copy of the personal data that krkeya holds about you. This includes your account registration data, KYC status, transaction history, and any support communications on record. To submit a data access request, write to [email protected] with the subject line "Data Access Request" and include your registered email address and account username.

7.2 Right to Rectification

If any personal data held by krkeya is inaccurate or incomplete, you have the right to request that it be corrected. Minor details such as contact email addresses can be updated directly through the Account Settings panel. For corrections to identity data (name, date of birth) that affect KYC records, please contact the support team as documentary evidence may be required.

7.3 Right to Erasure

You may request that krkeya delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Please note that erasure requests cannot be fulfilled where data retention is required by law (for example, transaction records held for financial compliance purposes). In such cases, krkeya will explain which data must be retained and why.

7.4 Right to Restrict Processing

You have the right to request that krkeya restrict the processing of your personal data in specific situations, such as while you contest the accuracy of data we hold or while a complaint is being investigated. During the restriction period, your data will be stored but not actively processed.

7.5 Right to Withdraw Consent

Where krkeya processes your data on the basis of your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. You can manage your consent preferences in the Account Settings panel or by contacting the support team.

8 Contact & Updates

If you have any questions, concerns, or requests related to this Privacy Policy or the way krkeya handles your personal data, please contact the krkeya privacy support team at [email protected]. The team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6) and will respond to written privacy enquiries within four business hours.

krkeya reserves the right to update this Privacy Policy from time to time to reflect changes in platform features, data practices, or applicable legal requirements. When material changes are made, registered players will be notified via email or an on-platform notification at least 7 days before the updated policy takes effect. The "Effective" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the krkeya platform after any revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept the revised policy, please discontinue use of the platform and request account closure as described in the Terms & Conditions.