krijya Privacy Policy

1 Data We Collect

When you interact with the krijya platform — whether during registration, during gameplay, or when contacting support — we collect certain categories of personal data. The table below summarises the main categories, the specific data points within each, and the lawful basis on which we rely to process that data.

1.1 Data You Provide Directly

The majority of personal data we hold about you is data you provide voluntarily during registration, during the KYC verification process, or when communicating with our support team. This includes your name, contact details, copies of identity documents, and payment method references. Providing accurate information is a condition of account registration — see Section 2 of the Terms & Conditions for full details.

1.2 Data Collected Automatically

When you access the krijya platform, our servers and analytics systems automatically collect technical and usage data. This includes your IP address (which may indicate your approximate geographic location within Bangladesh), the device and browser you are using, the pages and games you visit, and the timestamps of your activity. This data is collected primarily for security, fraud prevention, and platform optimisation purposes.

1.3 Data from Third Parties

We may receive limited personal data about you from third-party sources, including our payment processing partners (for transaction verification), game providers such as Pragmatic Play, Evolution Gaming, and Spribe (for game integrity monitoring), and identity verification service providers used during the KYC process. Data received from third parties is handled in accordance with this Policy and the contractual obligations we hold with those partners.

2 How We Use Your Data

krijya uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or notifying you of the new purpose.

2.1 Account Management and Service Delivery

We use your identity and contact data to create and maintain your account, verify your identity, process your deposits and withdrawals, calculate and apply bonus entitlements, and provide you with access to the casino and sportsbook services you have requested. Without this processing, we cannot provide the platform services to you.

2.2 Legal and Regulatory Compliance

We are required to process certain categories of your data to comply with our legal obligations. These obligations include conducting Know Your Customer (KYC) age and identity verification, monitoring transactions for suspicious patterns consistent with money laundering or terrorist financing, and maintaining records of player activity for the minimum periods required by applicable law.

2.3 Fraud Prevention and Platform Security

Technical and usage data, including IP addresses and device fingerprints, are used to detect and prevent fraudulent account activity, multi-accounting, bonus abuse, and unauthorised access attempts. Our security team reviews anomalous patterns automatically and manually. This processing is carried out on the basis of our legitimate interest in maintaining a secure and fair platform for all players.

2.4 Responsible Gaming Monitoring

Usage data — including session duration, deposit frequency, wager amounts, and loss patterns — is monitored by our responsible gaming systems to identify players who may be exhibiting signs of problematic gambling behaviour. Where such patterns are identified, our team may make proactive contact with the player to offer responsible gaming tools. This processing is carried out in your legitimate interest and in fulfilment of our platform's responsible gaming obligations.

2.5 Personalisation and Marketing

Where you have given your consent to receive marketing communications, we use your contact data and usage data to send you promotional offers, bonus notifications, and news about events such as BPL cricket season promotions, Eid special offers, and Pohela Boishakh bonuses. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Withdrawing marketing consent does not affect your ability to use the platform.

2.6 Customer Support

Communication data from support tickets and chat interactions is used to resolve your queries, investigate complaints, and improve the quality of our customer service. Support records are retained for a reasonable period to allow us to handle follow-up queries and disputes relating to the same matter.

2.7 Platform Analytics and Improvement

Aggregated and anonymised usage data is used internally to analyse platform performance, understand which games and features are most popular, and make improvements to the user experience. This data is processed in an aggregated form and cannot be used to identify individual players once anonymised.

3 Data Sharing

krijya does not sell, rent, or trade your personal data. We share your data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment partners. For bKash, Nagad, and Rocket transactions, this means sharing your mobile number and transaction reference with the relevant mobile financial service. For bank transfer transactions, this means sharing your account details with the relevant bank (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other). These partners are contractually bound to use your data only for payment processing purposes.

3.2 Identity Verification Providers

During the KYC process, copies of your identity documents and verification selfies may be shared with our third-party identity verification service provider. This provider processes your documents solely for the purpose of confirming your identity and age on behalf of krijya. They are not permitted to use your data for any other purpose.

3.3 Game Technology Providers

Casino games on the krijya platform are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as player session tokens and game round identifiers) necessary to deliver game content and to record game outcomes for audit purposes. Providers do not receive your full personal identity or financial data.

3.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by law, court order, or regulatory direction. We may also disclose data where we reasonably believe it is necessary to protect the rights, property, or safety of krijya, our players, or the general public.

4 Cookies & Tracking

The krijya platform uses cookies and similar tracking technologies (including local storage and session storage) to deliver a functional and personalised experience. Below is a transparent breakdown of the types of cookies we use.

4.1 Managing Cookies

You may control which non-essential cookies are stored on your device through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling strictly necessary cookies will impair the functionality of the krijya platform — for example, you will not be able to remain logged in to your account if session cookies are blocked.

4.2 Third-Party Cookies

Some cookies placed during your visit to krijya originate from our third-party game providers and analytics partners. These cookies are governed by the privacy policies of the respective third parties. We do not control the content of third-party cookies but we contractually require our technology partners to use them only for the limited purposes described above.

5 Data Retention

krijya retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active life plus a minimum of five years following account closure, to satisfy financial record-keeping and anti-money laundering obligations.
• KYC and identity documents: Retained for a minimum of five years following account closure or the last transaction on the account, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for three years following the resolution of the relevant ticket or dispute, or longer if the matter is subject to ongoing legal proceedings.
• Marketing data: Retained until you withdraw marketing consent, after which it is deleted or anonymised within 30 days.
• Technical and usage logs: Typically retained for 13 months in identifiable form, then aggregated or anonymised for longer-term analytics.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data (which cannot be used to identify you) may be retained indefinitely for aggregate analytics purposes.

6 Data Security

The security of your personal data is a top priority for krijya. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, and disclosure.

6.1 Technical Measures

All data transmitted between your device and the krijya platform is encrypted using Transport Layer Security (TLS). Data at rest on our servers is encrypted using AES-256 or equivalent industry-standard encryption. Access to personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication for administrative systems.

6.2 Organisational Measures

All staff and contractors who handle personal data are bound by confidentiality obligations and receive regular data protection training. Our third-party service providers are assessed for data security compliance before engagement and are required to maintain appropriate security standards under the terms of their data processing agreements with krijya.

6.3 Incident Response

In the event of a personal data breach that poses a risk to your rights and freedoms, krijya will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay via the email address registered to their account. We will also notify any relevant regulatory authorities as required by applicable law.

7 Your Privacy Rights

As a registered player on the krijya platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a description of your request. We will respond within a reasonable timeframe.

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, structured format. An access request can be made by contacting support with your registered email address. We may ask you to verify your identity before processing the request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic contact data such as your email address or phone number, you can update this directly in your account settings. For identity data such as your registered name or date of birth, please contact support with supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that erasure requests cannot be fulfilled where we are required to retain the data to comply with a legal obligation, such as anti-money laundering record-keeping requirements.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or where you contest the lawful basis for processing. During a restriction, your data will continue to be stored but will not be actively processed for other purposes.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from krijya, update your preferences in your account settings or contact support directly. Your objection will be actioned within 30 days.

7.6 Right to Data Portability

Where processing is carried out on the basis of your consent or a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. Contact support to request a data export.

8 Policy Updates

krijya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. When a material change is made to this Policy, we will notify registered players via the email address associated with their account prior to the change taking effect.

The effective date displayed at the top of this page indicates the date on which the current version of the Policy came into force. We recommend that you review this Policy periodically. Your continued use of the krijya platform following notification of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy or about how krijya handles your personal data, please do not hesitate to contact our support team. We are committed to responding to all data-related enquiries transparently and promptly.