Privacy Policy
How krikey Collects, Uses, and Protects Your Data

1 Introduction

This Privacy Policy (hereinafter "Policy") sets out how krikey (hereinafter "krikey", "we", "us", or "our"), the operator of the online gaming platform at krikey.club, collects, uses, stores, discloses, and otherwise processes the personal data of individuals who access or use our platform (hereinafter "you", "Player", or "User").

We understand that privacy is a serious matter. When you create a krikey account, make a deposit, place a bet, or simply visit our website, you may share personal information with us. This Policy explains precisely what happens to that information. We encourage you to read it carefully before using the krikey platform.

This Policy should be read alongside our Terms & Conditions, which govern your use of the krikey platform as a whole. By accessing krikey.club or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you have questions about any aspect of this Policy that are not answered here, please contact our support team at [email protected]. We will respond within 48 hours during Bangladesh Standard Time (UTC+6) operating hours.

2 Data Controller

krikey acts as the data controller for all personal data collected through the krikey.club platform. As data controller, krikey determines the purposes for which and the means by which personal data is processed. All enquiries, data subject rights requests, and privacy-related complaints should be directed to krikey through the contact details provided in Section 16 of this Policy.

Where krikey engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and game studio partners — those parties act as data processors under contractual arrangements that require them to handle personal data in accordance with applicable data protection principles and the instructions of krikey.

3 Personal Data We Collect

krikey collects the following categories of personal data from players on the platform:

krikey does not knowingly collect special category data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless it is strictly necessary for a specific regulatory compliance purpose, in which case you will be informed separately.

4 How We Collect Your Data

krikey collects personal data through the following means :

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the krikey platform, via server logs, cookies, pixel tags, and similar tracking technologies described further in Section 11.
• Third-Party Sources: Identity and fraud-risk data received from identity verification partners during the KYC process; transaction status data received from payment processors including bKash, Nagad, Rocket, and Upay; risk-scoring data from fraud prevention service providers.
• Publicly Available Sources: Publicly accessible databases and registries consulted as part of anti-money-laundering (AML) screening and sanctions checks, such as politically exposed persons (PEP) lists and sanctions watchlists.

5 Purposes of Processing

krikey processes your personal data for the following purposes:

• Account Registration and Management: To create and maintain your krikey account, verify your identity, manage your account settings, and provide you with access to platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels; to reconcile transaction records; and to investigate and resolve payment disputes.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the 18+ age requirement, and that your payment methods are registered in your own name, in accordance with our anti-money-laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Operation and Improvement: To operate, maintain, test, and improve the krikey platform; to diagnose technical issues; to analyse gameplay patterns and optimise the user experience; and to develop new features and product offerings.
• Customer Support: To respond to your enquiries, resolve complaints, process responsible gaming requests, and communicate important account-related information.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour; to implement and enforce responsible gaming tools you have activated (such as deposit limits and self-exclusion); and to deliver timely interventions where appropriate.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money-laundering requirements, data retention obligations, and responses to lawful requests from competent authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent or where a legitimate interest applies, and always with a clear opt-out mechanism.

6 Legal Basis for Processing

krikey processes personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being processed:

• Contractual Necessity: Processing is necessary to perform the contract between you and krikey — that is, to operate your account, process your deposits and withdrawals, and deliver gaming services to you as described in our Terms & Conditions.
• Legal Obligation: Processing is necessary for krikey to comply with legal obligations, including anti-money-laundering legislation, identity verification requirements, and data retention mandates.
• Legitimate Interests: Processing is necessary for krikey's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your privacy rights and interests.
• Consent: For specific processing activities — most notably the sending of marketing communications and the use of non-essential cookies — krikey relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing message.

7 How We Share Your Data

krikey does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following defined circumstances:

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card network partners. These providers receive only the data required to complete the specific transaction and are contractually bound to handle it securely.
• Identity Verification Providers: We share identity documents and personal details with third-party KYC and AML screening services as part of the player verification process. These providers act as data processors under our instruction and are prohibited from using your data for any other purpose.
• Game Providers: When you access games supplied by third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain session data (such as a pseudonymous player identifier, stake amounts, and game results) is shared with the relevant provider to facilitate gameplay and calculate winnings. Game providers do not receive your name, contact details, or payment information.
• Fraud Prevention Services: We share technical data and, where necessary, identity data with fraud detection and risk-scoring service providers to protect the integrity of the platform and the security of all players.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory direction. krikey will, where legally permissible, notify you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of krikey's business or assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.

8 International Data Transfers

The krikey platform serves players in Bangladesh. Some of our service providers — including game studios, fraud prevention partners, and cloud infrastructure providers — may be located or operate servers in countries outside Bangladesh. Where personal data is transferred to a country that may not provide an equivalent level of data protection, krikey takes appropriate safeguards to ensure that the transfer is conducted lawfully and that your data remains protected.

These safeguards may include contractual data transfer agreements incorporating standard data protection clauses that require the recipient to protect your data to a standard equivalent to that described in this Policy, restrictions on the use of transferred data to the specific purposes for which it was shared, and security requirements consistent with those applied by krikey on its own systems.

If you require further information about the specific safeguards applied to any international transfer of your personal data, please contact us at [email protected].

9 Data Retention

krikey retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on the krikey platform.
• Closed Account Data: Following the closure of your account (whether by you or by krikey), personal data is retained for a minimum of five years from the date of closure to meet anti-money-laundering record-keeping requirements and to resolve any outstanding disputes or regulatory enquiries.
• KYC and Identity Documents: Retained for a minimum of five years from the date of submission, or longer if required by a specific legal obligation.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for a minimum of three years from the date of the communication.
• Marketing Consent Records: Retained for as long as the consent is active and for a minimum of two years after consent is withdrawn, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

krikey implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data exchanged between your device and the krikey platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Any attempt to intercept data in transit will encounter only encrypted, unreadable content.
• Encryption at Rest: Sensitive personal data stored on krikey's servers — including identity documents, financial details, and account credentials — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. krikey staff members are granted access only to the data required for their specific role, and access privileges are reviewed regularly.
• Password Security: Account passwords are hashed using a one-way cryptographic function. krikey staff cannot view your plaintext password. You are responsible for selecting a strong, unique password and keeping it confidential.
• Fraud Monitoring: Automated systems continuously monitor transaction patterns and login behaviour for signs of unauthorised access or fraudulent activity. Suspicious events trigger alerts for manual review by our security team.
• Vendor Security: Third-party service providers who process personal data on krikey's behalf are contractually required to maintain security standards consistent with or exceeding those applied by krikey.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, krikey will notify affected players promptly and take all reasonable steps to contain the breach and mitigate its impact.

11 Cookies & Tracking Technologies

krikey uses cookies and similar technologies (including pixel tags and local storage objects) to operate the platform, personalise your experience, and gather analytical data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the krikey platform to function. They enable core features such as session management, login authentication, and the processing of wagers. These cookies cannot be disabled without impairing platform functionality.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how players interact with the krikey platform — including which pages are visited most frequently and where technical errors occur. This data is used solely to improve platform performance and the player experience.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game categories, and responsible gaming tool configurations — so that the platform behaves consistently across sessions.
• Marketing Cookies: Where you have provided consent, these cookies track your engagement with krikey content to allow us to deliver personalised promotional offers and bonus notifications relevant to your gaming preferences.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of parts of the krikey platform. Marketing cookies may be disabled at any time by contacting [email protected].

12 Minors and the 18+ Policy

The krikey platform is strictly restricted to individuals aged 18 years and above. krikey does not knowingly collect or process personal data belonging to individuals under the age of 18. If krikey becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.

During the registration and KYC process, krikey takes active steps to verify that all players meet the minimum age requirement, including requesting documentary proof of age. Parents and guardians who believe that a minor may have registered an account on the krikey platform are urged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

13 Your Privacy Rights

As a user of the krikey platform, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. krikey will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that krikey holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. For certain data — such as your name and date of birth — correction may require the submission of documentary evidence.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to krikey's legal retention obligations, which may prevent immediate deletion of certain categories of data.
• Right to Restriction: You have the right to request that krikey restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on krikey's legitimate interests. krikey will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

krikey will not charge a fee for handling privacy rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. krikey reserves the right to request proof of identity before fulfilling a privacy rights request to ensure that data is disclosed only to the individual to whom it belongs.

14 Marketing Communications

krikey may send you promotional communications about bonuses, new game releases, seasonal offers (including Eid, Pohela Boishakh, and Victory Day promotions), and other platform news. Marketing communications are sent only where you have provided your consent during account registration or have subsequently opted in through your account settings.

You may opt out of receiving marketing communications from krikey at any time by:

• Clicking the "unsubscribe" or "opt out" link included in any marketing email or SMS message sent by krikey.
• Updating your communication preferences within your krikey account settings.
• Contacting our support team at [email protected] with a clear request to be removed from marketing communications.

Please note that opting out of marketing communications does not affect the receipt of transactional or service-related messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent as part of the core account management service and do not require marketing consent.

15 Changes to This Privacy Policy

krikey reserves the right to update or revise this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date shown at the top of the document. Where changes are considered by krikey to be particularly significant, a notification will also be sent to your registered email address or displayed upon your next login to the platform.

Your continued use of the krikey platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and may request the closure of your account in accordance with the Terms & Conditions.

We encourage you to review this Policy periodically so that you remain informed about how krikey handles your personal data. The date displayed in the "Last Updated" notice at the top of this page indicates when the most recent version came into effect.

16 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which krikey handles your personal data, please reach out to us through the following channel:

This Privacy Policy is written in English. In the event of any inconsistency or dispute regarding interpretation, the English language version of this Policy shall be the authoritative version. krikey is committed to handling all privacy enquiries with transparency, professionalism, and respect for your data rights.