kiriya Privacy Policy

Introduction & Scope

This Policy applies to all personal data processed by kiriya in connection with the operation of our online casino and sports betting platform, including data collected when you visit the kiriya website, create a player account, make a deposit or withdrawal, participate in promotions, contact customer support, or otherwise interact with any kiriya service.

kiriya operates exclusively in the Bangladesh market, serving adult players aged 18 and above. All data processing activities described in this Policy are carried out in connection with the provision of online gaming and sports betting services to Bangladesh-based players. Payment processing is conducted through domestic mobile banking providers including bKash, Nagad, Rocket, and Upay, and any data shared with these providers is subject to the provisions of Section 6 of this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the kiriya platform and are incorporated by reference into our overall user agreement.

Data We Collect

kiriya collects the following categories of personal data from players and platform visitors:

How We Collect Your Data

kiriya collects personal data through the following methods:

• Direct submission: When you register an account on kiriya, you provide identity data, contact data, and optionally preference data directly through the registration form;
• Verification submissions: When kiriya requests identity verification documents (such as a national ID card or passport), you submit those documents directly to our support team;
• Transaction activity: Financial data is generated and recorded automatically each time you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay;
• Platform usage: Technical data and gaming activity data are collected automatically as you interact with the kiriya platform, including through the use of cookies and server-side logging systems;
• Support interactions: Communications data is collected when you contact the kiriya support team via live chat or email;
• Third-party payment providers: kiriya may receive limited transaction confirmation data from mobile banking providers (bKash, Nagad, Rocket, Upay) to verify the status of deposit and withdrawal transactions.

How We Use Your Data

kiriya uses the personal data it collects for the following specific purposes:

• Account management: To create, verify, and maintain your kiriya player account, and to authenticate your identity when you use the kiriya login;
• Payment processing: To process deposits and withdrawal requests via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions in BDT;
• Platform operation: To deliver the casino games, live dealer tables, slot games, and sports betting services that constitute the core kiriya product;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, money laundering, bonus abuse, and other prohibited activities as defined in our Terms & Conditions;
• Responsible gaming: To monitor gaming activity for patterns that may indicate problem gambling, and to enforce deposit limits, session controls, or self-exclusion measures requested by the player or required by our responsible gaming obligations;
• Customer support: To respond to enquiries, resolve disputes, and provide assistance to players via live chat and email;
• Promotions and communications: To send you information about promotions, bonuses, and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting kiriya support;
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and overall user experience;
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from authorised authorities, and enforce our Terms & Conditions.

Legal Basis for Processing

kiriya processes your personal data on the following legal grounds:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform our contractual obligations to you under the kiriya Terms & Conditions — specifically, to operate your account, process your transactions, and provide access to our gaming services;
• Legitimate interests: kiriya has a legitimate interest in processing technical data, gaming activity data, and communications data for the purposes of fraud prevention, platform security, and the improvement of our services, provided such interests are not overridden by your data protection rights;
• Legal obligation: Certain processing activities — particularly identity verification, financial record-keeping, and cooperation with lawful authority requests — are carried out to comply with applicable legal obligations;
• Consent: Where kiriya processes your data for direct marketing or promotional communications, we do so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting our support team.

Data Sharing & Disclosure

kiriya does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below:

• Payment service providers: kiriya shares the minimum necessary financial data with bKash, Nagad, Rocket, and Upay for the sole purpose of processing deposits and withdrawals. These providers handle your payment data under their own privacy policies and security frameworks;
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as anonymised player session tokens) to facilitate the delivery of their games on the kiriya platform. No personally identifiable data is shared with game studios beyond what is strictly necessary for session management;
• Technology and infrastructure partners: kiriya uses third-party hosting, server, and security infrastructure providers who process data on our behalf under strict data processing agreements. These providers are not permitted to use your data for any purpose other than providing services to kiriya;
• Legal and regulatory authorities: kiriya may disclose personal data to law enforcement agencies, financial intelligence units, or other authorised government bodies where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to protect the safety, rights, or property of kiriya or others;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the kiriya business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy terms will continue to protect your data.

Cookies & Tracking Technologies

kiriya uses cookies and similar browser-based technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the kiriya platform to function. They enable core features such as secure login sessions, session state management, and payment flow continuity. The platform cannot function without these cookies, and they cannot be disabled;
• Functional cookies: These cookies remember your preferences — such as language settings and responsible gaming limit configurations — to provide a more consistent experience across sessions;
• Analytics cookies: kiriya uses anonymised, aggregated analytics data to understand how players navigate the platform and identify areas for improvement. This data does not identify you personally and is not shared with external advertising platforms;
• Security cookies: These cookies help kiriya detect and prevent fraudulent login attempts, unusual account activity, and bot-driven interactions with the platform.

kiriya does not use third-party advertising cookies, tracking pixels, or social media widgets that would allow external platforms to monitor your kiriya activity. You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use the kiriya platform.

Data Retention

kiriya retains your personal data for the following periods:

• Active account data: While your kiriya account remains open and active, we retain all associated personal data necessary to operate the account and provide our services;
• Closed account data: Following the closure of a kiriya account — whether by the player's request or by kiriya — we retain core identity and financial transaction records for a period of five (5) years from the date of closure. This retention period reflects our obligations to maintain accurate financial records and our ability to cooperate with any lawful authority investigation that may arise;
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, after which they are securely deleted unless they relate to an ongoing dispute;
• Technical and log data: Server logs, IP address records, and session data are retained for twelve (12) months, after which they are anonymised or deleted;
• Marketing preferences: Records of your marketing opt-in or opt-out status are retained for the lifetime of your account and for three (3) years following account closure, to enable us to honour your preferences and to demonstrate compliance with consent requirements.

At the end of each applicable retention period, kiriya securely destroys or permanently anonymises the relevant data using industry-standard data deletion procedures.

Your Rights & Choices

As a kiriya player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data kiriya holds about you at any time. kiriya will respond to access requests within 30 calendar days;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many details directly through your account settings, or by contacting support;
• Right to erasure: You may request that kiriya delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note that certain data may be retained for the mandatory periods described in Section 8, even following an erasure request;
• Right to restrict processing: You may request that kiriya restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to a particular processing activity;
• Right to object: You have the right to object to the processing of your data where kiriya relies on legitimate interests as the legal basis for processing. You may also withdraw consent for marketing communications at any time;
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that kiriya provide your personal data in a structured, machine-readable format.

To exercise any of the above rights, please contact the kiriya support team via live chat or by writing to [email protected]. We will acknowledge your request promptly and aim to resolve it within 30 calendar days. In some cases, we may need to verify your identity before actioning a data rights request.

Data Security

kiriya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the kiriya platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit;
• Encryption at rest: Sensitive personal data stored on kiriya servers — including identity documents submitted for verification — is encrypted at rest using industry-standard AES-256 encryption;
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. kiriya staff members who do not require access to specific categories of personal data in order to perform their role are not granted that access;
• Fraud detection systems: kiriya employs automated monitoring systems that flag unusual account activity, suspicious login patterns, and potentially fraudulent transaction behaviour for review by our security team;
• Regular security reviews: The kiriya platform and its underlying infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities.

While kiriya takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own kiriya login credentials. If you suspect that your account has been compromised, please contact kiriya support immediately via live chat.

Children's Privacy

The kiriya platform is strictly intended for adults aged 18 years and above. kiriya does not knowingly collect, store, or process personal data from any person under the age of 18. If you are under 18, you must not access or use the kiriya platform, create an account, or submit any personal information.

If kiriya discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately close the relevant account, delete all associated personal data, and return any deposited funds in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child under the age of 18 has registered an account on kiriya, please contact us immediately at [email protected] so that we can take prompt action.

Changes to This Policy

kiriya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this document and, where the changes are significant, notify registered players via in-platform notification or email.

Your continued use of the kiriya platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how kiriya protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kiriya's data processing practices, please do not hesitate to contact us at [email protected]. Our team is available 24 hours a day, 7 days a week, and we aim to respond to all privacy-related enquiries within 5 business days.