Privacy Policy — kirekya
Your privacy matters to us. This Privacy Policy explains exactly what personal data kirekya collects from Bangladesh players, how that data is used and protected, who it may be shared with, and what rights you hold over your own information. We are committed to handling your data with transparency, security, and respect.
This Privacy Policy applies to all personal data processed by kirekya in connection with the operation of its online casino and sportsbook platform, accessible to players in Bangladesh and other permitted jurisdictions. By registering an account on kirekya, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns about your data, contact us at support@kirekya.
Section 1
Data Controller and Contact
For the purposes of this Privacy Policy, the data controller responsible for the personal data of kirekya players is kirekya ("the Platform", "we", "us", "our"). The platform operates as an internationally licensed offshore online casino and sports betting service.
As data controller, kirekya determines the purposes and means by which personal data is collected and processed in connection with player registration, account management, payment processing, identity verification, promotional activity, and responsible gaming operations.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact our data protection team using the following details:
- Email: support@kirekya
- Subject line: "Privacy / Data Protection Enquiry"
- Response time: We aim to respond to all data-related enquiries within 5 business days.
Players in Bangladesh who wish to raise a data protection concern are encouraged to contact us directly in the first instance. We will endeavour to resolve all concerns promptly and transparently before any escalation to a third-party authority is required.
Section 2
Information We Collect
kirekya collects personal data from players through several channels: directly from you when you register and use the platform, automatically through your use of the website and mobile interface, and from trusted third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are as follows:
Registration and Identity Data
- Full legal name
- Date of birth (collected to verify the 18+ age requirement)
- Email address
- Bangladesh mobile phone number
- Residential address in Bangladesh (city, district, postal code)
- Username and encrypted password hash
- Copies of identity documents submitted for KYC verification (National ID card, passport, birth certificate)
- Proof of address documents (utility bills, bank statements)
Financial and Transaction Data
- Deposit and withdrawal amounts and dates
- Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, card)
- Mobile banking account numbers (bKash, Nagad, Rocket, Upay) — stored in masked format
- Bank account or card details (stored in tokenised format; full card numbers are never stored by kirekya)
- Transaction reference numbers and confirmation codes
- Bonus credits and wagering activity linked to promotions
Gaming and Behavioural Data
- Game session history (games played, bet amounts, outcomes, session duration)
- Sports betting history (markets, stakes, odds, results)
- Login timestamps and session durations
- Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)
- Customer support interaction history (chat transcripts, email correspondence)
Technical and Device Data
- IP address at login and during active sessions
- Device type, operating system, and browser version
- Device fingerprint identifier (used for fraud detection and duplicate account prevention)
- Geolocation data derived from IP address (country and city level only)
- Cookie identifiers and session tokens (see the Cookies section below)
Communications Data
- Content of emails, live chat messages, and support tickets sent to kirekya
- Marketing preference settings (opt-in or opt-out status for promotional communications)
- Responses to surveys or feedback requests, where voluntarily provided
kirekya adheres to the data minimisation principle: we collect only the personal data that is necessary for the specific, disclosed purpose for which it is collected. We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless strictly required by applicable KYC or responsible gaming obligations and with appropriate safeguards in place.
Section 3
Legal Basis for Processing
kirekya processes personal data only where a valid legal basis exists for doing so. The following table summarises the primary legal bases on which different categories of processing activity are conducted:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and maintenance | Performance of contract — necessary to provide the platform service you have signed up for |
| Identity verification (KYC) and age verification | Legal obligation — required under AML, KYC, and responsible gaming compliance obligations |
| Processing deposits and withdrawals | Performance of contract — necessary to execute financial transactions you have requested |
| Fraud detection and prevention | Legitimate interests — protecting the platform and its players from financial crime and abuse |
| Responsible gaming monitoring and intervention | Legal obligation and legitimate interests — to protect players from gambling-related harm |
| Customer support communications | Performance of contract — necessary to respond to queries and resolve account issues |
| Promotional and marketing communications | Consent — only where you have opted in to receive promotional messages |
| Website analytics and performance monitoring | Legitimate interests — improving platform performance and user experience |
| Compliance with legal or regulatory requests | Legal obligation — where required by applicable law or regulatory authority |
Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your rights and freedoms, taking into account the nature of the data processed and the reasonable expectations of players on a platform of this kind. You may object to processing carried out on legitimate interests grounds by contacting support@kirekya.
Section 4
How We Use Your Data
The personal data collected by kirekya is used exclusively for the purposes described in this Privacy Policy. We do not sell your personal data to third parties. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. Specifically, your personal data is used for the following purposes:
Platform Operation and Account Management
Your registration data, transaction history, and gaming activity data are used to create and maintain your player account, process your deposits and withdrawals in BDT through bKash, Nagad, Rocket, Upay, and other supported channels, calculate and credit bonus entitlements, display your balance and betting history in the account portal, and maintain a complete and accurate record of your activity for player support and dispute resolution purposes.
Identity Verification and Compliance
KYC documents and registration data are used to verify that you are at least 18 years of age and that you are the lawful owner of the payment accounts used on the platform. This verification process is mandatory under kirekya's anti-money laundering (AML) and responsible gaming compliance programme. Verified identity records are retained for the period required by applicable compliance obligations.
Fraud Prevention and Security
Device data, IP addresses, login patterns, and transaction data are analysed by kirekya's automated fraud detection systems and compliance team to identify and prevent fraudulent activity including duplicate account creation, bonus abuse, payment fraud, money laundering, and unauthorised account access. Where suspicious activity is detected, the relevant data may be used to support an internal investigation or, where required by law, disclosed to relevant authorities.
Responsible Gaming
Gaming session data, deposit frequency, loss patterns, and responsible gaming tool usage are monitored to support the platform's player protection programme. This monitoring enables kirekya to identify players who may be exhibiting signs of problem gambling behaviour and to proactively offer support resources, cooling-off periods, or direct outreach. For full details of the responsible gaming tools available, see the Responsible Gaming page.
Customer Support
Communications data and account history are used by the kirekya support team to respond to your enquiries, process complaints, investigate disputed transactions, and provide accurate account assistance. Support interactions are logged and retained to ensure continuity of service and for quality assurance purposes.
Marketing and Promotions
Where you have opted in to receive marketing communications, your contact details and gaming preferences may be used to send you personalised promotional offers, bonus notifications, and information about new games or features on kirekya. You can withdraw your marketing consent at any time by updating your communication preferences in the account settings or by emailing support@kirekya. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Platform Improvement and Analytics
Aggregated and anonymised usage data derived from player activity is used to analyse platform performance, identify areas for improvement, optimise game content selection, and enhance the overall player experience on kirekya. Analytics processing does not involve the use of individually identifiable personal data beyond what is necessary to detect and resolve technical issues.
Section 5
Data Sharing and Third Parties
kirekya does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared with third parties only where necessary to deliver the services described in this Privacy Policy, to comply with legal obligations, or to protect the legitimate interests of the platform and its players.
Payment Processors
To process deposits and withdrawals, kirekya shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the data required to execute and confirm the specific transaction and are bound by their own regulatory and contractual data protection obligations.
Game Studios and Content Providers
Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate the delivery of their game content within the kirekya platform. These studios do not receive your full name, contact details, or financial data. All studio partnerships are governed by data processing agreements that restrict the use of any player-related data to the specific purpose of game delivery and technical support.
Identity Verification Providers
KYC document data may be processed by a specialist third-party identity verification service to cross-reference your submitted documents against authoritative data sources. This processing is carried out under a strict data processing agreement and the verified result is returned to kirekya; the identity verification provider does not retain your documents beyond the period necessary to complete the verification check.
Fraud Detection and Analytics Providers
Device fingerprint data, IP addresses, and session behavioural data may be processed by third-party fraud prevention and analytics service providers under contractual arrangements that prohibit use of the data for any purpose other than delivering the contracted service to kirekya.
Legal and Regulatory Disclosures
kirekya may disclose personal data to law enforcement agencies, regulatory authorities, or other official bodies where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and are logged internally as part of our compliance record.
Some of kirekya's service providers and game studio partners are located outside Bangladesh. Where personal data is transferred internationally, kirekya ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to protect the security and integrity of your personal data in line with internationally recognised data protection principles.
Section 7
Data Retention
kirekya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and compliance obligations, and to resolve disputes or enforce agreements. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration and identity data | 5 years from account closure | AML/KYC compliance obligations |
| KYC documents | 5 years from account closure | Regulatory record-keeping |
| Financial transaction records | 5 years from account closure | Financial crime prevention and audit |
| Gaming session history | 3 years from last session date | Dispute resolution and responsible gaming |
| Customer support records | 3 years from last interaction | Complaint resolution and quality assurance |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of lawful marketing basis |
| Analytical and anonymised data | Indefinite (no personal identifiers) | Platform improvement — no re-identification risk |
| Self-exclusion records | Minimum 7 years | Responsible gaming and regulatory compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with kirekya's data disposal procedures. Where data is retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory inquiry, this will be documented in our internal records.
Section 8
Your Rights Over Your Data
kirekya respects your rights in relation to your personal data. Subject to applicable law and certain platform-specific limitations (for example, data that must be retained for compliance purposes), you hold the following rights with respect to your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to access requests within 30 days.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your address or mobile number, you can update these directly within your account settings.
- Right to erasure: You may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation to retain it. Note that AML/KYC retention obligations mean that full erasure cannot be applied to all data categories during the mandatory retention period.
- Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
- Right to data portability: Where processing is carried out on the basis of your consent or for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another service provider where technically feasible.
- Right to object: You have the right to object to processing carried out on legitimate interests grounds. You also have an absolute right to object to direct marketing at any time, which we will action immediately upon receiving your request.
- Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact support@kirekya with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may need to verify your identity before processing the request to ensure we are disclosing or modifying data belonging to the correct account holder.
To protect your personal data from unauthorised disclosure, kirekya requires identity verification before processing any data rights request. You will be asked to confirm your registered email address, full name, and — where applicable — to provide a copy of the same identity document held on your account. This step is taken for your protection, not to create barriers to exercising your rights.
Section 9
Data Security Measures
kirekya takes the security of your personal data seriously. We have implemented a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the kirekya platform is encrypted using industry-standard TLS 1.2 or higher, ensuring that your personal and financial data cannot be intercepted in transit.
- Password hashing: Account passwords are never stored in plain text. kirekya uses a strong, salted cryptographic hashing algorithm to store password credentials. Even in the event of a data breach, your actual password is not exposed.
- Payment tokenisation: Card and bank account numbers are tokenised at the point of entry and are never stored in full on kirekya's servers. Payment processing is handled by certified payment service providers operating under PCI DSS standards.
- Access controls: Access to player personal data within kirekya's internal systems is restricted on a need-to-know basis. Staff access is governed by role-based access controls, and all access events are logged for audit purposes.
- Intrusion detection: kirekya employs automated intrusion detection and monitoring systems to identify and respond to anomalous access patterns or potential security incidents in real time.
- Regular security assessments: The platform undergoes periodic security reviews and penetration testing to identify and address vulnerabilities before they can be exploited.
- Data breach response: In the event of a personal data breach that poses a risk to player rights and freedoms, kirekya has a documented incident response procedure including timely notification to affected players where required.
While kirekya takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. Players are encouraged to use a strong, unique password for their kirekya account and to keep their login credentials confidential. If you suspect that your account has been compromised, contact support@kirekya immediately.
Section 10
Policy Updates and Contact
kirekya reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. When a material change is made, registered players will be notified via a login prompt or email to the registered address on file at least 7 days before the change takes effect.
The effective date at the top of this Privacy Policy will always reflect the date on which the current version came into force. We encourage you to review this page periodically to stay informed about how your personal data is protected. Continued use of kirekya after a policy update constitutes your acknowledgement of the revised Privacy Policy.
How to Contact Us
For any privacy-related question, data rights request, or concern about how kirekya handles your personal data, please reach out to our support team:
- Email: support@kirekya
- Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
- Hours: 24 hours a day, 7 days a week including Bangladesh public holidays (Eid, Victory Day, Independence Day)
- Response time: Acknowledgement within 24 hours; resolution within 5 business days for most requests
We value the trust that Bangladesh players place in kirekya and are committed to handling all privacy enquiries with professionalism, transparency, and care.
At a Glance
Our Privacy Commitments
Six core principles that guide how kirekya collects, handles, and protects the personal data of every Bangladesh player on the platform.
Data Never Sold
kirekya does not sell, rent, or trade your personal data to any third party for commercial gain. Your information is used solely to operate and improve the platform and to fulfil our legal obligations.
SSL Encryption
Every data transmission between your device and kirekya is protected by industry-standard TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
Your Rights Respected
Access, correct, delete, or export your personal data at any time by contacting our support team. We respond to all data rights requests within 5 business days and verify your identity before acting.
Minimal Data Collection
We collect only what is necessary for the specific purpose disclosed at the point of collection. No sensitive categories of data are gathered without a clear legal obligation and appropriate safeguards in place.
Marketing on Your Terms
Promotional emails and bonus notifications are sent only where you have explicitly opted in. You can withdraw your marketing consent at any time via account settings or by emailing our support team.
Responsible Retention
Personal data is kept only for as long as legally required or operationally necessary. Once the applicable retention period expires, data is securely deleted or irreversibly anonymised under our disposal procedures.
Explore kirekya — Bangladesh's Trusted Casino Platform
Now that you have reviewed our Privacy Policy, you know exactly how your data is protected on kirekya. Browse our full game library, check the FAQ for quick answers, or sign in to your account and start playing. 18+ only. Please gamble responsibly.