krkya Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how krkya ("krkya", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals who register an account or use the services available at krkya.ws ("the Platform"). This Policy applies to all players, whether they are browsing the Platform without an account, registering for the first time, or continuing to use an existing account. By registering an account on krkya or by continuing to use the Platform after this Policy has been published or updated, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

krkya takes the privacy of its players seriously. The Platform is designed with data minimisation in mind: we collect only the personal data that is necessary for the purposes described in this Policy, and we do not retain it for longer than those purposes require. All personal data processed by krkya is handled in accordance with applicable data protection principles, including purpose limitation, data integrity, storage limitation and confidentiality. This Policy should be read alongside krkya's Terms and Conditions, which are available on this Platform.

krkya collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically through your use of the Platform (for example, device identifiers, IP addresses, session logs); and from third-party payment service providers when you make a deposit or withdrawal. The categories of personal data we collect are set out below.

krkya uses the personal data it collects solely for the purposes described in this Policy. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining your prior consent. The primary purposes for which krkya processes personal data are as follows:

• To create, manage and maintain your krkya player account, including identity verification, password management and account security measures.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard) and to maintain accurate financial records of all transactions.
• To provide, personalise and improve the gaming experience on the krkya Platform, including recommending relevant games, sports markets and promotions based on your gaming activity and preferences.
• To comply with our Know Your Customer (KYC) and anti-money laundering obligations, which require us to verify the identity of players and monitor account and transaction activity for suspicious patterns.
• To operate our responsible gaming programme, including monitoring gaming behaviour for indicators of problem gambling, sending session time reminders, and processing requests to activate deposit limits, cool-off periods or self-exclusion.
• To respond to support queries, investigate complaints and resolve disputes related to your account, transactions, or gaming activity on the Platform.

krkya does not use your personal data for unsolicited direct marketing communications without your prior consent. Where you have consented to receive promotional communications from krkya, you may withdraw that consent at any time by contacting support or by updating your account notification preferences.

krkya does not sell, rent or trade personal data to third parties for commercial purposes. Personal data may be shared with third parties only in the specific circumstances set out in this section. In all cases, any third party with whom krkya shares personal data is required to handle that data in accordance with applicable data protection standards and to use it only for the purposes for which it was shared.

krkya currently works with the following categories of third-party service providers who may process personal data as part of providing services to the Platform: payment processing partners (bKash, Nagad, Rocket, Upay, card payment processors), gaming software providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe and others), and platform infrastructure providers (hosting, CDN and security services). Each provider is selected on the basis of its data security standards and is contractually bound to process personal data only on krkya's instructions.

krkya uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain your session state while you are logged in, and gather aggregated analytical data about how players use the Platform. Cookies are small text files stored on your device by your browser. The categories of cookies used by krkya include: strictly necessary cookies (required for the Platform to function and which cannot be disabled), functional cookies (which remember your preferences and settings between sessions), and analytical cookies (which help krkya understand how players navigate the Platform and where improvements can be made).

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the krkya Platform, and some features may not work as intended if cookies are disabled. krkya does not use cookies to collect personal data for the purposes of selling that data to third parties or for delivering targeted advertising through third-party advertising networks.

krkya implements appropriate technical and organisational security measures to protect the personal data it holds against unauthorised access, disclosure, alteration or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and krkya's servers; hashed storage of account passwords using industry-standard one-way hashing algorithms (passwords are never stored in plain text); access controls that restrict access to personal data to authorised krkya personnel on a need-to-know basis; and regular security reviews of the Platform's infrastructure and data processing systems.

While krkya takes all reasonable precautions to secure personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a significant risk to the rights and freedoms of affected players, krkya will take prompt steps to contain the breach, assess its impact, and notify affected players and any relevant authorities in accordance with applicable obligations. Players are also responsible for maintaining the security of their own account credentials and should contact support immediately if they suspect their account has been compromised.

krkya retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law. Account data (identity, contact and financial records) is retained for the duration of the account relationship and for a period of five years following account closure, in order to satisfy anti-money laundering record-keeping requirements. Gaming activity logs are retained for a period of three years from the date of each gaming session. Technical data (IP logs, session logs) is retained for a maximum of twelve months. Where you have requested deletion of your personal data and there is no legal obligation requiring krkya to retain it, krkya will delete or anonymise your data within thirty days of your request being confirmed.

As a player on the krkya Platform, you have the following rights in respect of the personal data that krkya holds about you. To exercise any of these rights, please contact the krkya support team at [email protected] with a clear description of your request. krkya will respond to all rights requests within 30 days of receipt.

krkya's Platform is strictly intended for adults aged 21 and above. krkya does not knowingly collect or process personal data belonging to any person under the age of 21. If krkya becomes aware that personal data has been collected from a person under 21 — whether through an underage registration attempt, a parental notification or any other means — it will immediately close the associated account, delete or anonymise all personal data collected, and void any transactions or balances associated with that account. If you are a parent or guardian and you believe that a person under 21 in your care has registered an account on krkya, please contact support at [email protected] immediately so that the matter can be addressed without delay.

krkya reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to this Policy — for example, a new category of personal data being collected, a new third-party data processor being engaged, or a change to the legal basis for processing — krkya will notify active players via the contact details registered to their account or by means of a prominent notice on the Platform. The updated Policy will be effective from the date it is published at krkya.ws/privacy-policy. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised Policy. We recommend that you review this page periodically to stay informed of how krkya handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about the way in which krkya is handling your personal data, please contact the krkya support team. Email: [email protected]. Our support team is available around the clock, seven days a week, operating on Bangladesh Standard Time (BST, UTC+6). We will acknowledge all privacy-related queries within 2 hours and aim to resolve all requests fully within 30 days of receipt. For complex requests — particularly erasure requests involving KYC-retained data — we will communicate clearly about any applicable retention obligations that may affect the scope of our response.