kikria Privacy Policy

This Privacy Policy is issued by kikria, the operator of the online gaming and sports betting platform accessible at kikria.win ("the Platform", "we", "us", "our"). kikria provides cricket betting, live casino, slot games, and related entertainment services to players in Bangladesh and select international markets.

kikria acts as the data controller in respect of all personal data collected through the Platform. This means kikria determines the purposes for which your personal data is processed and the means by which that processing takes place. Where kikria engages third-party service providers who process data on its behalf, those parties act as data processors and are bound by contractual data processing agreements that impose obligations consistent with this Privacy Policy.

For all data-related queries, requests, or complaints, you may contact us at [email protected]. We aim to respond to all privacy-related correspondence within five (5) business days of receipt.

This Privacy Policy applies to all personal data collected by kikria through the following channels:

• Registration and account creation on the kikria.win Platform
• Use of the Platform's games, betting markets, and interactive features
• Deposits, withdrawals, and all financial transactions processed via kikria
• Identity verification (KYC) processes and document submission
• Communications with the kikria customer support team via live chat, email, or WhatsApp
• Participation in promotions, tournaments, loyalty programmes, or surveys
• Automatic technical data collected when you browse or interact with the Platform

This Policy does not apply to third-party websites or services that may be referenced on the Platform. kikria is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you engage with.

kikria collects the following categories of personal data, depending on how you interact with the Platform:

Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (National ID Card, passport, or driving licence) where submitted for KYC verification.

Contact Data: Email address, mobile phone number, and residential address. This information is provided by you at registration or updated subsequently through your account settings.

Financial Data: Payment method identifiers (e.g., registered mobile number for bKash, Nagad, or Rocket accounts; bank account details for bank transfer methods), transaction history including deposit amounts, withdrawal requests, and bonus transactions. kikria does not store full bank card numbers or mobile banking PINs.

Gaming & Betting Data: Records of all bets placed, games played, wager amounts, winnings, losses, session durations, and bonus usage. This data is essential for account management, dispute resolution, and responsible gaming monitoring.

Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, referring URLs, and platform interaction logs. This data is collected automatically via server logs and cookies when you access the Platform.

Communications Data: Records of your communications with the kikria support team, including live chat transcripts, email correspondence, and any information you voluntarily provide when contacting us.

Preference & Profile Data: Language preferences, notification settings, self-imposed responsible gaming limits, and account configuration choices you have made on the Platform.

kikria uses your personal data for the following specific purposes:

• Account management: To create, maintain, and administer your kikria account, including authentication and access control.
• Service delivery: To process bets, settle gaming outcomes, credit winnings, process deposits and withdrawals, and deliver the full functionality of the Platform.
• Identity verification: To conduct KYC checks as required for account security, fraud prevention, and compliance with anti-money laundering obligations.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance via our support channels.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and abuse of bonus structures.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and to administer self-imposed responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• Legal compliance: To comply with applicable legal and regulatory obligations, respond to lawful requests from competent authorities, and maintain records as required by law.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the Platform's performance, features, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out at any time.

kikria processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to perform the contract between you and kikria — i.e., to operate your account and deliver the services you have registered for.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, record-keeping, and reporting obligations.
• Legitimate interests: Processing carried out in pursuit of kikria's legitimate business interests, including fraud prevention, platform security, and improvement of our services — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Where processing is based on legitimate interests, kikria has carried out a balancing assessment to confirm that those interests are proportionate and do not unduly prejudice your rights and freedoms as a data subject.

kikria does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with carefully selected third-party service providers only to the extent necessary to operate the Platform and deliver our services. All such providers are bound by contractual data processing agreements and are prohibited from using your data for any purpose beyond what is specified by kikria.

The categories of third parties with whom data may be shared include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank — to process deposits and withdrawals on your behalf.
• KYC & identity verification providers: Third-party services engaged to validate identity documents and conduct anti-fraud screening.
• Game studios & content providers: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Habanero, Ezugi, and other licensed studios whose games are hosted on the Platform. These providers may receive session data necessary to operate their game engines.
• IT infrastructure & hosting providers: Cloud infrastructure and server management providers who host and maintain the kikria Platform under strict data security agreements.
• Legal & regulatory authorities: Where required by law, court order, or lawful request from a competent authority, kikria may disclose personal data to regulatory bodies, law enforcement agencies, or legal advisors.

kikria will not share your personal data with any third party outside the categories listed above without your explicit prior consent, except where required by law.

The kikria Platform uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, secure, and personalised experience. Cookies are small text files placed on your device when you access the Platform. They do not contain executable code and cannot access other files on your device.

kikria uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the Platform. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. The Platform cannot function without these cookies, and they do not require your consent.
• Functional cookies: Used to remember your preferences such as language settings, account display options, and responsible gaming configurations. These improve your experience but are not strictly essential.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate the Platform — such as which pages are visited most frequently and where users encounter errors. This data helps kikria improve the Platform. No personally identifiable data is included in analytics reporting.

kikria does not use third-party advertising cookies, cross-site behavioural tracking pixels, or social media tracking scripts. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in and maintain a session.

kikria retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data & transaction records: Retained for a minimum of five (5) years from the date of account closure, in order to satisfy legal record-keeping obligations related to anti-money laundering compliance and financial audit requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication, or until any associated dispute or legal matter is fully resolved.
• Technical & server logs: Retained for up to twelve (12) months, after which they are deleted or permanently anonymised.
• Marketing consent records: Retained for as long as you maintain an active account, plus a period of three (3) years thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with kikria's internal data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it is isolated and access-restricted until deletion can be completed.

kikria implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kikria's servers
• AES-256 encryption for sensitive data at rest within kikria's database infrastructure
• One-way cryptographic hashing (bcrypt) for all account passwords — passwords are never stored in recoverable form
• Two-factor authentication (2FA) available to all registered players and mandatory for all internal administrative accounts
• Regular third-party security audits and penetration testing of the Platform infrastructure
• Role-based access controls ensuring that kikria staff can only access personal data to the extent required for their specific job function
• Automated fraud detection and anomaly monitoring systems operating in real time across all account activity
• Secure, access-controlled physical infrastructure for all server environments

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, kikria will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. kikria will never ask for your password via email, chat, or phone. Report any unauthorised account access to [email protected] immediately.

As a data subject, you have the following rights in relation to the personal data held by kikria. These rights may be exercised at any time by contacting [email protected]:

• Right of access: You may request a copy of all personal data kikria holds about you, along with information about how it is processed. We will respond within 30 days of a valid request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Minor corrections (e.g., contact details) may be made directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires us to retain it.
• Right to restriction of processing: You may request that kikria restrict the processing of your data in certain circumstances — for example, where the accuracy of the data is contested or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that kikria provide your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, your data will be removed from marketing lists immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

All rights requests are handled free of charge. kikria will respond within 30 calendar days of receiving a valid, verifiable request. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

kikria's primary platform infrastructure is operated to serve players in Bangladesh. In the course of delivering its services, personal data may be transferred to or processed by third-party service providers whose infrastructure is located outside Bangladesh — including game studios, cloud hosting providers, and KYC verification services operating internationally.

Where such international transfers occur, kikria ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that applied within Bangladesh. These safeguards may include contractual data processing clauses, binding corporate rules, or reliance on adequacy determinations applicable to the receiving jurisdiction.

By using the kikria Platform and registering an account, you acknowledge that your data may be transferred internationally for the purposes described in this Policy, subject always to the security and contractual safeguards described herein.

The kikria Platform is strictly intended for adults aged 18 years and above. kikria does not knowingly collect personal data from any person under the age of 18. The Platform employs age verification measures during registration and KYC processes to prevent underage access.

If kikria becomes aware that personal data has been collected from a person under the age of 18 without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we may investigate and act accordingly.

kikria reserves the right to update, amend, or replace this Privacy Policy at any time in order to reflect changes in our data practices, operational procedures, legal obligations, or regulatory guidance. The "Last Reviewed" date displayed at the top of this document will be updated to reflect the most recent revision.

Where changes are material — meaning they significantly affect how your data is collected, used, or shared — kikria will provide advance notice via the email address registered to your account or via a prominent notice displayed on the Platform. Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed of how kikria protects your data. The current version of this Policy is always available at kikria.win/privacy-policy.

For all privacy-related enquiries, data subject rights requests, or complaints regarding kikria's data handling practices, please contact us using the following details:

• Data Enquiries Email: [email protected] (plain text — not a link)
• Live Chat: Available 24/7 via the kikria Platform — average response under 2 minutes
• WhatsApp: +880 1700-000000 (plain text — not a link)
• Response Time: Within 5 business days for privacy enquiries; within 30 days for formal data subject rights requests
• Support Hours: 00:00 – 23:59 BST (UTC+6), every day of the year

When submitting a data subject rights request, please include your full name as registered on your kikria account, your registered email address or mobile number, and a clear description of the right you wish to exercise. kikria may need to verify your identity before processing the request in order to protect your data from unauthorised access.

If you are not satisfied with kikria's response to a privacy concern, you have the right to escalate the matter through applicable legal channels in your jurisdiction.