Section 1
Introduction
Welcome to the krikyo Privacy Policy. krikyo ("we", "us", "our") operates the online gaming and sports betting platform available at krikyo.club (the "Platform"). This Privacy Policy sets out how krikyo collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("Players", "you", "your").
This Policy applies to all personal data collected through the Platform, including data provided directly by you during registration, data collected automatically during your use of the Platform, and data received from third-party verification and payment service providers. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.
krikyo is committed to handling your personal data in a transparent, fair, and lawful manner. We take our data protection obligations seriously and continuously review our internal practices to ensure that your personal information is handled responsibly. By registering on or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
Important: This Privacy Policy is published in English. In the event of any inconsistency arising from translation, the English version shall govern. If you have any questions about how your data is used, please contact us at
[email protected].
Section 2
Data We Collect
krikyo collects personal data that is necessary for the operation of our Services, the verification of your identity, the processing of your transactions, and the fulfilment of our legal obligations. The categories of personal data we collect are set out below.
| Category |
Examples of Data Collected |
Purpose |
| Identity Data |
Full legal name, date of birth, gender, government-issued ID number, photograph |
Account registration, age and identity verification (KYC) |
| Contact Data |
Email address, mobile phone number, residential address, city, postal code |
Account communication, verification, support |
| Financial Data |
bKash / Nagad / Rocket / Upay mobile wallet details, bank account references, transaction history |
Processing deposits, withdrawals, and refunds |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps |
Security monitoring, fraud prevention, platform optimisation |
| Usage Data |
Game history, bet history, session duration, pages visited, features used |
Service improvement, responsible gaming monitoring, personalisation |
| Communications Data |
Support ticket content, live chat transcripts, email correspondence |
Customer support, dispute resolution, quality assurance |
| Verification Documents |
Copies of national ID, passport, utility bills, bank statements |
Identity verification, source-of-funds checks, AML compliance |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where such data is incidentally contained within a document you submit for identity verification purposes. Where such data is received, it is not used for any purpose other than verifying the document's authenticity.
Section 3
How We Collect Data
krikyo collects your personal data through the following channels:
- Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the Platform.
- Automatically — when you visit or use the Platform, our servers, analytics tools, and cookie technologies automatically record technical and usage data including your IP address, device identifiers, browser type, and in-Platform behaviour.
- From third-party identity verification providers — when we use certified third-party KYC services to verify your identity and age, those services may share verification results and associated data with us.
- From payment service providers — payment processors including bKash, Nagad, Rocket, and Upay may share transaction confirmation data with krikyo to facilitate the crediting of your Account Balance.
- From fraud prevention and risk services — we may receive data from third-party anti-fraud and risk-scoring services that help us detect and prevent fraudulent activity on the Platform.
Accuracy of Your Data: You are responsible for ensuring that all personal data you provide to krikyo is accurate, complete, and up to date. Providing false, misleading, or outdated information may result in Account suspension or closure in accordance with our Terms & Conditions.
Section 4
How We Use Your Data
krikyo uses your personal data for the following purposes:
- Account creation and management — to register your account, verify your identity and age, maintain your account profile, and process your login credentials securely.
- Provision of Services — to enable your access to casino games, sports betting markets, live dealer games, and other Services available on the Platform.
- Transaction processing — to process deposits, withdrawals, and any promotional credits applied to your Account Balance.
- Identity and age verification — to comply with our obligation to verify that all Players are aged 18 years or above and to prevent underage gambling.
- Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
- Responsible gaming — to monitor gameplay patterns that may indicate problem gambling behaviour and to facilitate the application of self-exclusion, deposit limits, loss limits, or other responsible gaming tools at your request or where krikyo determines it is necessary.
- Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
- Legal and regulatory compliance — to meet our obligations under applicable anti-money-laundering, counter-terrorist financing, and consumer protection requirements.
- Marketing and promotions — where you have provided your consent, to send you personalised promotional offers, bonus notifications, and information about new games or features. You may withdraw your marketing consent at any time by contacting [email protected].
- Platform improvement — to analyse usage patterns, test new features, troubleshoot technical issues, and improve the overall Player experience.
krikyo does not use automated decision-making processes that produce legal or similarly significant effects on Players without human review. Where automated processes are used for fraud detection or risk scoring, any consequential action (such as Account suspension) is reviewed by a member of the krikyo compliance team before being implemented.
Section 5
Legal Basis for Processing
krikyo processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:
- Performance of a contract — processing your data is necessary to fulfil our contractual obligations to you under the Terms & Conditions, including providing the Services, processing transactions, and managing your Account.
- Legal obligation — processing is necessary for krikyo to comply with applicable legal and regulatory requirements, including identity verification, age verification, anti-money-laundering obligations, and record-keeping requirements.
- Legitimate interests — processing is necessary for krikyo's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring, provided those interests are not overridden by your privacy rights.
- Consent — where krikyo relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
Withdrawing Consent: To withdraw your consent to marketing communications at any time, please send a written request to
[email protected]. Your request will be processed within five (5) Business Days and you will no longer receive promotional communications from krikyo.
Section 6
Data Sharing
krikyo does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of third parties where necessary and proportionate:
- Identity verification providers — certified third-party KYC and age-verification services used to confirm your identity and eligibility to use the Platform.
- Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, as necessary to process your deposits and withdrawals.
- Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data to facilitate the delivery of their game content on the Platform. These providers operate under their own privacy and data protection obligations.
- Fraud prevention and anti-money-laundering services — third-party risk and compliance services used to detect and prevent financial crime and fraudulent activity.
- IT and platform service providers — hosting, cloud infrastructure, security, and analytics service providers who process data on krikyo's behalf under strict data processing agreements.
- Legal and regulatory authorities — where krikyo is required by law, court order, or regulatory direction to disclose personal data to law enforcement agencies, government bodies, or other competent authorities.
- Professional advisers — lawyers, accountants, and auditors who provide professional services to krikyo and who are bound by professional confidentiality obligations.
All third parties with whom krikyo shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with krikyo's instructions and applicable law. krikyo does not authorise any third party to use your personal data for their own independent purposes.
Section 7
Cookies & Tracking Technologies
krikyo uses cookies and similar tracking technologies to operate and improve the Platform, to maintain the security of your session, and to understand how Players interact with our content. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other data on your device.
The cookies used on the krikyo Platform fall into the following categories:
- Strictly Necessary Cookies — these cookies are essential for the Platform to function correctly and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
- Functional Cookies — these cookies remember your preferences and settings (such as language, preferred games, and display options) to provide a more personalised experience across sessions.
- Analytics Cookies — these cookies collect anonymised information about how Players use the Platform, including which pages are visited most frequently and how long Players spend on each section. This information helps krikyo improve the Platform experience. Analytics cookies require your consent.
- Marketing Cookies — these cookies may be used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These cookies require your explicit consent and are only activated where you have agreed to receive marketing communications.
You can control or delete cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the Platform, including the ability to log in or access certain game content. Your cookie preferences can also be managed by contacting our support team.
Managing Cookies: Most modern browsers allow you to view, block, or delete cookies through the browser's privacy settings. Refer to your browser's help documentation for instructions specific to your browser type. Blocking strictly necessary cookies will prevent you from accessing your krikyo Account.
Section 8
Data Security
krikyo implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes the following measures:
- TLS/SSL Encryption — all data transmitted between your device and the krikyo Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Our Platform operates exclusively over HTTPS.
- Secure Data Storage — all personal data is stored on secured servers with access controls that restrict access to authorised personnel only. Data at rest is encrypted using AES-256 encryption standards.
- Access Controls — internal access to personal data is granted on a strict need-to-know basis. All staff with access to Player data are subject to background screening and are bound by confidentiality obligations.
- Multi-Factor Authentication — krikyo's internal systems employ multi-factor authentication to prevent unauthorised access by third parties or through compromised credentials.
- Regular Security Audits — krikyo conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our Platform and infrastructure.
- Incident Response — in the event of a data breach that is likely to result in a risk to your rights and freedoms, krikyo will notify affected Players and relevant authorities in accordance with applicable data protection requirements.
Your Responsibility: While krikyo takes all reasonable steps to protect your data, the security of your Account also depends on the strength of your password and the security of your own device. You must keep your login credentials confidential and must not share them with any third party. krikyo will never ask you for your password.
Section 9
Data Retention
krikyo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The general retention periods applicable to the main categories of personal data we hold are as follows:
| Data Category |
Retention Period |
Reason |
| Account and identity data |
Duration of Account plus 5 years after closure |
AML compliance, legal claims, regulatory obligations |
| Transaction and financial records |
7 years from transaction date |
Financial record-keeping, tax compliance, AML audit trail |
| KYC verification documents |
Duration of Account plus 5 years after closure |
Regulatory compliance, anti-fraud |
| Customer support communications |
3 years from date of last interaction |
Dispute resolution, quality assurance |
| Technical and usage data (logs) |
12 months from collection |
Security monitoring, fraud detection |
| Marketing consent records |
Until consent is withdrawn, plus 2 years |
Evidence of consent, compliance with marketing regulations |
| Self-exclusion records |
Duration of exclusion plus 5 years |
Responsible gaming obligations, regulatory compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction. Where data has been anonymised, it may be retained indefinitely for aggregated statistical analysis purposes without constituting personal data processing.
Section 10
Your Rights
As a Player whose personal data is processed by krikyo, you have the following rights in respect of your personal data. krikyo is committed to facilitating the exercise of these rights promptly and without undue restriction.
👁️
Right of Access
Request a copy of the personal data krikyo holds about you and information about how it is used.
✏️
Right of Rectification
Request correction of any inaccurate or incomplete personal data held on your Account.
🗑️
Right of Erasure
Request deletion of your personal data where it is no longer necessary, subject to krikyo's legal retention obligations.
⏸️
Right to Restrict Processing
Request that krikyo restricts the processing of your data in certain circumstances, such as while a dispute is being resolved.
📦
Right to Portability
Request a copy of data you have provided to krikyo in a structured, machine-readable format where technically feasible.
🚫
Right to Object
Object to the processing of your data for marketing purposes or where processing is based on legitimate interests.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. krikyo will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it.
Please note that certain rights are subject to limitations. For example, the right of erasure does not apply where krikyo is required to retain your data to comply with a legal obligation or to defend against a legal claim. krikyo will communicate any applicable limitations clearly when responding to your request.
Section 11
Children's Privacy
The krikyo Platform is strictly for adults aged 18 years and above. krikyo does not knowingly collect, process, or retain the personal data of any person under the age of 18. Registration on the Platform by any person under 18 years of age is absolutely prohibited and constitutes a material breach of our Terms & Conditions.
Where krikyo has reason to believe that a Player is under the age of 18, that Player's Account will be suspended immediately pending age verification. If the Player is confirmed to be under 18, the Account will be permanently closed and any funds held on the Account will be handled in accordance with applicable law.
If you are a parent or guardian and believe that a person under 18 in your care has registered on the krikyo Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.
18+ Only: krikyo takes the protection of minors extremely seriously. We employ age verification technology and document checks to prevent underage access. If you are under 18, you must not attempt to register or use the krikyo Platform under any circumstances.
Section 12
Third-Party Links
The krikyo Platform may contain references to third-party game providers, payment processors, and service partners. While krikyo takes care to work with reputable partners, we do not control the privacy practices of third-party platforms and cannot accept responsibility for their data handling.
Game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own privacy policies in relation to any data they independently collect. krikyo recommends that you review the privacy policies of any third-party service with which you interact in connection with the Platform.
Payment processors including bKash, Nagad, Rocket, and Upay operate under their own privacy frameworks and are independently regulated. Any personal data you submit directly to these payment providers in connection with a transaction is governed by their respective privacy policies.
Section 13
Policy Updates
krikyo reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our business operations, or our data processing practices. The date of the most recent revision is indicated at the top of this page.
When material changes are made to this Policy, krikyo will endeavour to provide reasonable advance notice to registered Players via email or a prominent notice on the Platform. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how krikyo is protecting your personal data. If you disagree with any changes to this Policy, you may request closure of your Account by contacting our support team.
Section 14
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which krikyo processes your personal data, please contact our Data Protection team using the details below. All communications must be submitted in English.
- Email: [email protected]
- Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
- Response Time: Within 30 calendar days for data rights requests; within 5 Business Days for general privacy enquiries
- Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Effective Date: This Privacy Policy is effective as of 1 July 2026 and supersedes all prior versions. Players who registered before this date are subject to the updated Policy upon their next login to the Platform.