Kerikiya Privacy Policy – How We Protect Your Data

Kerikiya collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers such as payment processors and identity verification services.

Kerikiya uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a player. We do not use your data for purposes beyond those listed below without obtaining your explicit consent first.

• Account management: Creating and maintaining your Kerikiya account, verifying your identity, and processing your login sessions.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer securely and accurately.
• Fraud prevention: Detecting and preventing unauthorised access, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying limits or interventions where appropriate.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of support provided.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, navigation, and overall user experience.
• Legal compliance: Meeting obligations under applicable financial regulations, anti-money laundering laws, and data protection requirements.
• Communications: Sending account notifications, security alerts, and — where you have opted in — promotional offers from Kerikiya.

Kerikiya does not use your personal data to build advertising profiles or share it with marketing networks. Promotional communications from Kerikiya are opt-in only and can be unsubscribed from at any time via your account settings or by contacting support.

Kerikiya processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and Kerikiya — including account creation, payment processing, and game operation.
• Legal obligation: Processing required to comply with anti-money laundering regulations, KYC requirements, and financial reporting obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and responsible gaming monitoring — where these interests do not override your rights.
• Consent: Processing for optional purposes such as marketing communications, where you have explicitly opted in. You may withdraw consent at any time.

Kerikiya does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, and banking partners receive the payment details necessary to process your transactions. These providers are bound by their own data protection obligations.
• Identity verification providers: A certified KYC provider receives your identity documents for verification. Documents are not retained by Kerikiya beyond the verification period.
• Fraud detection services: Anonymised technical data such as IP addresses and device fingerprints may be shared with fraud prevention tools to protect the platform and its players.
• Regulatory authorities: Kerikiya may be required by law to disclose player data to financial regulators, law enforcement, or other government bodies. Kerikiya will notify affected players where legally permitted to do so.
• Platform infrastructure providers: Cloud hosting and database providers who process data on Kerikiya's behalf under strict data processing agreements.

Kerikiya uses cookies and similar technologies to keep the platform running smoothly and securely. Cookies are small text files stored on your device when you visit Kerikiya. They do not contain your financial information or passwords.

Kerikiya does not use advertising or tracking cookies. You can manage your cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to your Kerikiya account.

Kerikiya retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are determined by the type of data and the legal obligations that apply to it.

• Account data: Retained for the duration of your account plus 5 years after closure, as required by financial compliance regulations.
• Transaction records: Retained for 7 years in line with standard financial record-keeping requirements.
• KYC documents: Deleted or anonymised within 30 days of successful verification, unless retention is required by law.
• Support communications: Retained for 2 years from the date of the last interaction.
• Technical logs: Retained for 90 days for security monitoring purposes, then deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

When data is no longer required, Kerikiya deletes it securely or anonymises it so it can no longer be linked to you. Anonymised, aggregated data may be retained indefinitely for platform analytics.

Kerikiya implements technical and organisational security measures appropriate to the sensitivity of the data held. These measures are reviewed and updated regularly to address emerging threats.

• All data in transit is encrypted using TLS 1.3.
• Passwords are stored as salted hashes — Kerikiya staff cannot see your password.
• Payment data is handled by PCI-DSS compliant processors and is not stored on Kerikiya's primary servers.
• Access to player data within Kerikiya is restricted to staff who need it to perform their role, and is logged for audit purposes.
• Two-factor authentication is available for all Kerikiya accounts and is strongly recommended.
• Kerikiya conducts regular security audits and penetration testing.

Despite these measures, no online platform can guarantee absolute security. If you suspect your Kerikiya account has been compromised, contact support immediately at [email protected] and change your password without delay.

As a Kerikiya player, you have the following rights over your personal data. These rights can be exercised by contacting Kerikiya support at [email protected]. Kerikiya will respond to all data rights requests within 30 days.

• Right of access: You can request a copy of all personal data Kerikiya holds about you.
• Right to rectification: You can ask Kerikiya to correct inaccurate or incomplete personal data.
• Right to erasure: You can request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
• Right to restriction: You can ask Kerikiya to limit how your data is used while a dispute or correction request is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format for transfer to another service.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you can withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You can object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.

Kerikiya will not charge a fee for exercising these rights in normal circumstances. If a request is manifestly unfounded or excessive, Kerikiya may charge a reasonable administrative fee or decline to act, with written explanation provided.

Kerikiya is strictly for players aged 18 and above. Kerikiya does not knowingly collect personal data from anyone under the age of 18. Age is verified during the registration process and again during KYC verification.

If Kerikiya discovers that an account belongs to a person under 18, the account will be closed immediately, all funds will be returned to the deposit source, and all personal data associated with the account will be deleted. If you believe a minor has registered on Kerikiya, please contact [email protected] immediately.

Kerikiya may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable law, or improvements to data protection practices. When material changes are made, Kerikiya will notify registered players by email at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Minor changes such as formatting corrections or clarifications that do not affect your rights may be made without prior notice. Continued use of Kerikiya after an updated Privacy Policy takes effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to report a privacy concern, contact the Kerikiya data team using the details below. We aim to respond to all privacy-related enquiries within 24 hours.