Privacy Policy — How krikyo Handles Your Personal Data

Introduction

Welcome to the krikyo Privacy Policy. krikyo ("we", "us", "our") operates the online gaming and sports betting platform available at krikyo.club (the "Platform"). This Privacy Policy sets out how krikyo collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("Players", "you", "your").

This Policy applies to all personal data collected through the Platform, including data provided directly by you during registration, data collected automatically during your use of the Platform, and data received from third-party verification and payment service providers. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

krikyo is committed to handling your personal data in a transparent, fair, and lawful manner. We take our data protection obligations seriously and continuously review our internal practices to ensure that your personal information is handled responsibly. By registering on or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Data We Collect

krikyo collects personal data that is necessary for the operation of our Services, the verification of your identity, the processing of your transactions, and the fulfilment of our legal obligations. The categories of personal data we collect are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where such data is incidentally contained within a document you submit for identity verification purposes. Where such data is received, it is not used for any purpose other than verifying the document's authenticity.

How We Collect Data

krikyo collects your personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the Platform.
• Automatically — when you visit or use the Platform, our servers, analytics tools, and cookie technologies automatically record technical and usage data including your IP address, device identifiers, browser type, and in-Platform behaviour.
• From third-party identity verification providers — when we use certified third-party KYC services to verify your identity and age, those services may share verification results and associated data with us.
• From payment service providers — payment processors including bKash, Nagad, Rocket, and Upay may share transaction confirmation data with krikyo to facilitate the crediting of your Account Balance.
• From fraud prevention and risk services — we may receive data from third-party anti-fraud and risk-scoring services that help us detect and prevent fraudulent activity on the Platform.

How We Use Your Data

krikyo uses your personal data for the following purposes:

• Account creation and management — to register your account, verify your identity and age, maintain your account profile, and process your login credentials securely.
• Provision of Services — to enable your access to casino games, sports betting markets, live dealer games, and other Services available on the Platform.
• Transaction processing — to process deposits, withdrawals, and any promotional credits applied to your Account Balance.
• Identity and age verification — to comply with our obligation to verify that all Players are aged 18 years or above and to prevent underage gambling.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
• Responsible gaming — to monitor gameplay patterns that may indicate problem gambling behaviour and to facilitate the application of self-exclusion, deposit limits, loss limits, or other responsible gaming tools at your request or where krikyo determines it is necessary.
• Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal and regulatory compliance — to meet our obligations under applicable anti-money-laundering, counter-terrorist financing, and consumer protection requirements.
• Marketing and promotions — where you have provided your consent, to send you personalised promotional offers, bonus notifications, and information about new games or features. You may withdraw your marketing consent at any time by contacting [email protected].
• Platform improvement — to analyse usage patterns, test new features, troubleshoot technical issues, and improve the overall Player experience.

krikyo does not use automated decision-making processes that produce legal or similarly significant effects on Players without human review. Where automated processes are used for fraud detection or risk scoring, any consequential action (such as Account suspension) is reviewed by a member of the krikyo compliance team before being implemented.

Legal Basis for Processing

krikyo processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Performance of a contract — processing your data is necessary to fulfil our contractual obligations to you under the Terms & Conditions, including providing the Services, processing transactions, and managing your Account.
• Legal obligation — processing is necessary for krikyo to comply with applicable legal and regulatory requirements, including identity verification, age verification, anti-money-laundering obligations, and record-keeping requirements.
• Legitimate interests — processing is necessary for krikyo's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring, provided those interests are not overridden by your privacy rights.
• Consent — where krikyo relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

Data Sharing

krikyo does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of third parties where necessary and proportionate:

• Identity verification providers — certified third-party KYC and age-verification services used to confirm your identity and eligibility to use the Platform.
• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, as necessary to process your deposits and withdrawals.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data to facilitate the delivery of their game content on the Platform. These providers operate under their own privacy and data protection obligations.
• Fraud prevention and anti-money-laundering services — third-party risk and compliance services used to detect and prevent financial crime and fraudulent activity.
• IT and platform service providers — hosting, cloud infrastructure, security, and analytics service providers who process data on krikyo's behalf under strict data processing agreements.
• Legal and regulatory authorities — where krikyo is required by law, court order, or regulatory direction to disclose personal data to law enforcement agencies, government bodies, or other competent authorities.
• Professional advisers — lawyers, accountants, and auditors who provide professional services to krikyo and who are bound by professional confidentiality obligations.

All third parties with whom krikyo shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with krikyo's instructions and applicable law. krikyo does not authorise any third party to use your personal data for their own independent purposes.

Cookies & Tracking Technologies

krikyo uses cookies and similar tracking technologies to operate and improve the Platform, to maintain the security of your session, and to understand how Players interact with our content. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other data on your device.

The cookies used on the krikyo Platform fall into the following categories:

• Strictly Necessary Cookies — these cookies are essential for the Platform to function correctly and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional Cookies — these cookies remember your preferences and settings (such as language, preferred games, and display options) to provide a more personalised experience across sessions.
• Analytics Cookies — these cookies collect anonymised information about how Players use the Platform, including which pages are visited most frequently and how long Players spend on each section. This information helps krikyo improve the Platform experience. Analytics cookies require your consent.
• Marketing Cookies — these cookies may be used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These cookies require your explicit consent and are only activated where you have agreed to receive marketing communications.

You can control or delete cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the Platform, including the ability to log in or access certain game content. Your cookie preferences can also be managed by contacting our support team.

Data Security

krikyo implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• TLS/SSL Encryption — all data transmitted between your device and the krikyo Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Our Platform operates exclusively over HTTPS.
• Secure Data Storage — all personal data is stored on secured servers with access controls that restrict access to authorised personnel only. Data at rest is encrypted using AES-256 encryption standards.
• Access Controls — internal access to personal data is granted on a strict need-to-know basis. All staff with access to Player data are subject to background screening and are bound by confidentiality obligations.
• Multi-Factor Authentication — krikyo's internal systems employ multi-factor authentication to prevent unauthorised access by third parties or through compromised credentials.
• Regular Security Audits — krikyo conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our Platform and infrastructure.
• Incident Response — in the event of a data breach that is likely to result in a risk to your rights and freedoms, krikyo will notify affected Players and relevant authorities in accordance with applicable data protection requirements.

Data Retention

krikyo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The general retention periods applicable to the main categories of personal data we hold are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction. Where data has been anonymised, it may be retained indefinitely for aggregated statistical analysis purposes without constituting personal data processing.

Your Rights

As a Player whose personal data is processed by krikyo, you have the following rights in respect of your personal data. krikyo is committed to facilitating the exercise of these rights promptly and without undue restriction.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. krikyo will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, the right of erasure does not apply where krikyo is required to retain your data to comply with a legal obligation or to defend against a legal claim. krikyo will communicate any applicable limitations clearly when responding to your request.

Children's Privacy

The krikyo Platform is strictly for adults aged 18 years and above. krikyo does not knowingly collect, process, or retain the personal data of any person under the age of 18. Registration on the Platform by any person under 18 years of age is absolutely prohibited and constitutes a material breach of our Terms & Conditions.

Where krikyo has reason to believe that a Player is under the age of 18, that Player's Account will be suspended immediately pending age verification. If the Player is confirmed to be under 18, the Account will be permanently closed and any funds held on the Account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a person under 18 in your care has registered on the krikyo Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

Third-Party Links

The krikyo Platform may contain references to third-party game providers, payment processors, and service partners. While krikyo takes care to work with reputable partners, we do not control the privacy practices of third-party platforms and cannot accept responsibility for their data handling.

Game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own privacy policies in relation to any data they independently collect. krikyo recommends that you review the privacy policies of any third-party service with which you interact in connection with the Platform.

Payment processors including bKash, Nagad, Rocket, and Upay operate under their own privacy frameworks and are independently regulated. Any personal data you submit directly to these payment providers in connection with a transaction is governed by their respective privacy policies.

Policy Updates

krikyo reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our business operations, or our data processing practices. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Policy, krikyo will endeavour to provide reasonable advance notice to registered Players via email or a prominent notice on the Platform. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how krikyo is protecting your personal data. If you disagree with any changes to this Policy, you may request closure of your Account by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which krikyo processes your personal data, please contact our Data Protection team using the details below. All communications must be submitted in English.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Response Time: Within 30 calendar days for data rights requests; within 5 Business Days for general privacy enquiries
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)