Karikiya Privacy Policy — Your Data, Protected

1. Who We Are

Karikiya is an online gaming and sports betting platform operated for players in Bangladesh. When you register on karikiya, create an account, make a deposit, or interact with any part of our platform, karikiya acts as the data controller responsible for your personal information. This privacy policy applies to all services offered under the karikiya brand, including the website, mobile app, and any promotional communications we send you.

If you have any questions about how karikiya handles your personal data, you can reach our privacy team directly at [email protected]. We aim to respond to all privacy-related queries within 48 hours.

2. What Data We Collect

Karikiya collects personal data in several ways — directly from you when you register or use the platform, automatically through your device and browser, and occasionally from third-party verification services. Here is a clear breakdown of what we collect and why:

Registration and Account Data

When you create a karikiya account, we collect the information you provide during the registration process. This includes:

• Full name as it appears on your national ID or passport
• Date of birth (to verify you are 18 or older)
• Mobile phone number registered with your bKash or Nagad account
• Email address (if provided)
• Username and encrypted password
• Preferred language and communication settings

Payment and Transaction Data

To process deposits and withdrawals on karikiya, we collect transaction-related information. This includes your bKash or Nagad account number, transaction reference IDs, deposit and withdrawal amounts, and timestamps. Karikiya does not store your full mobile banking PIN — payment authentication is handled directly by your payment provider.

Identity Verification Data

As part of our Know Your Customer (KYC) process, karikiya may collect copies of identity documents such as your National ID card, passport, or driving licence. This data is used solely for age and identity verification and is stored securely with restricted access.

Usage and Behavioural Data

When you use the karikiya platform, we automatically collect data about how you interact with it. This includes:

• Pages visited and features used on karikiya
• Games played, bet amounts, and session durations
• Device type, operating system, and browser version
• IP address and approximate geographic location
• Referral source (how you found karikiya)

3. How We Use Your Data

Karikiya uses your personal data for specific, legitimate purposes. We do not use your data in ways that go beyond what is described in this privacy policy. The main purposes for which karikiya processes your personal data are:

Purpose	Data Used
Creating and managing your karikiya account	Registration data, contact details
Processing deposits and withdrawals	Payment data, transaction history
Verifying your identity (KYC)	Identity documents, date of birth
Fraud prevention and security monitoring	Usage data, IP address, device data
Responsible gaming monitoring	Betting history, session data
Customer support	Account data, communication history
Sending promotional offers (with consent)	Contact details, game preferences
Platform improvement and analytics	Anonymised usage data

Karikiya will never use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without giving you the opportunity to request human review of that decision.

4. Legal Basis for Processing

Karikiya processes your personal data on the following legal grounds:

• Contract performance: Processing your registration data, payments, and account management is necessary to fulfil our contract with you as a karikiya player.
• Legal obligation: KYC verification, anti-money laundering checks, and responsible gaming monitoring are required by law and regulatory standards.
• Legitimate interests: Fraud prevention, platform security, and analytics are carried out in karikiya's legitimate interests, balanced against your privacy rights.
• Consent: Sending you marketing communications and using non-essential cookies is done only with your explicit consent, which you can withdraw at any time.

5. Sharing Your Data

Karikiya does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

Payment Processors

To process your deposits and withdrawals, karikiya shares the minimum necessary transaction data with bKash and Nagad. These providers operate under their own privacy policies and are bound by strict data security standards.

Identity Verification Services

Karikiya may use third-party KYC verification services to confirm your identity. These providers receive only the data required to complete the verification check and are contractually prohibited from using your data for any other purpose.

Legal and Regulatory Authorities

Karikiya may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts if we receive a valid legal request or if we are required to do so to comply with applicable law. We will notify you of such disclosures where legally permitted to do so.

Service Providers

Karikiya works with a small number of trusted technology service providers — such as cloud hosting and analytics platforms — who process data on our behalf. All such providers are bound by data processing agreements that restrict how they can use your data and require them to maintain appropriate security standards.

6. Cookies and Tracking

Karikiya uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Cookies are small text files stored on your device when you visit karikiya. Here is how we use them:

• Essential cookies: Required for the karikiya platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of essential cookies.
• Analytics cookies: Help karikiya understand how players navigate the platform so we can improve it. These cookies collect anonymised data about page visits, session lengths, and feature usage.
• Preference cookies: Remember your settings and preferences on karikiya, such as your language preference and notification settings.
• Marketing cookies: Used only with your consent to track the effectiveness of karikiya's promotional campaigns. You can opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the karikiya platform.

7. Data Retention

Karikiya retains your personal data for as long as your account is active and for a period after account closure as required by law and regulatory obligations. Specifically:

• Account and registration data is retained for the duration of your karikiya account plus a minimum of 5 years after closure, in line with anti-money laundering regulations.
• Transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC documents are retained for the period required by applicable law, typically 5 years after the end of the business relationship.
• Marketing consent records are retained for as long as you remain opted in, plus a reasonable period after opt-out to demonstrate compliance.
• Usage and analytics data in anonymised form may be retained indefinitely for platform improvement purposes.

Once the applicable retention period has passed, karikiya securely deletes or anonymises your personal data so that it can no longer be linked back to you.

8. Your Rights

As a karikiya player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and a description of your request. We will respond within 30 days.

9. Security Measures

Karikiya takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include:

• TLS encryption for all data transmitted between your device and karikiya's servers
• Encrypted storage of sensitive data including passwords and identity documents
• Access controls that restrict which karikiya staff can access personal data, based on their role
• Regular security audits and vulnerability assessments of the karikiya platform
• Two-factor authentication options for player accounts
• Real-time fraud monitoring and anomaly detection systems

Despite these measures, no online platform can guarantee absolute security. If you suspect that your karikiya account has been compromised, contact our support team immediately at [email protected].

10. Children's Privacy

Karikiya is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on karikiya, please contact us immediately at [email protected]. We will investigate and close the account promptly, deleting any associated personal data.

11. Changes to This Policy

Karikiya may update this privacy policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. The updated policy will always be available on this page with a revised "Last Updated" date at the top.

We encourage you to review karikiya's privacy policy periodically. Your continued use of the platform after any update constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this privacy policy or how karikiya handles your personal data, please get in touch with our privacy team:

• Email: [email protected]
• Response time: Within 48 hours for general queries; within 30 days for formal data rights requests

We take every privacy query seriously and will do our best to resolve your concern quickly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.