Privacy Policy — krikay11

This Privacy Policy is issued by krikay11 ("the Platform", "we", "us", "our") and applies to all individuals who access, browse, register on, or use any service provided through the krikay11 website and its associated mobile interface. This Policy describes how krikay11 collects, processes, stores, and protects personal data in connection with the provision of online sports betting, casino gaming, and related services to players primarily located in Bangladesh.

By creating an account on krikay11 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the terms of this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are available on the krikay11 website. Together, these three documents govern the full relationship between krikay11 and its players.

krikay11 collects personal data from players through several channels: directly at account registration, through ongoing platform activity, through payment transactions, through KYC verification submissions, and automatically through technical systems such as cookies and server logs. The categories of personal data we collect are set out below.

Registration and Identity Data

• Full legal name as it appears on your National Identity Card (NID) or passport.
• Date of birth (used for mandatory age verification — players must be 18 years or older).
• Residential address in Bangladesh (city, district, and postal code).
• A valid Bangladeshi mobile number (used for OTP verification, account alerts, and support communication).
• A working email address (used for account confirmation, transaction receipts, and promotional communications where opted in).
• A username chosen by you at registration.

KYC and Verification Documents

• Scanned or photographed copy of your National Identity Card, passport, or driver's licence.
• A live selfie or photograph taken alongside your identity document.
• Proof of payment method ownership (e.g., screenshot of bKash account registered in your name).
• Proof of residential address (e.g., utility bill, bank statement) where requested.

Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and the tokenised identifier associated with that method.
• Account balance history and bonus credit/debit records.
• Chargeback and dispute records where applicable.

Betting and Gaming Activity Data

• Records of all sports bets placed, including market, stake, odds, settlement outcome, and timestamps (BST).
• Casino game session history including game titles, bet amounts, win/loss records, and session duration.
• Bonus claims and wagering contribution history.
• In-play cash-out activations and crash game round history.

Technical and Device Data

• IP address at time of registration, login, deposit, and bet placement.
• Device type, operating system, and browser version.
• Geolocation data at the jurisdiction level (country/city) derived from IP address.
• Session timestamps, page-view logs, and navigation path within the Platform.
• Cookie identifiers and similar tracking data as described in Section 5.

krikay11 processes personal data for the following purposes. Each purpose is matched to a lawful basis for processing to ensure our data practices are grounded in legitimate grounds.

krikay11 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated tools are used — for example, in initial fraud scoring or responsible gaming alerts — a human review step is applied before any account action is taken.

krikay11 does not sell, rent, or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processors

To process deposits and withdrawals, krikay11 shares relevant transaction data with payment providers including bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard). These providers act as independent data controllers for the data they process and are subject to their own privacy policies and applicable Bangladeshi financial regulations.

Game Providers and Platform Partners

Live casino and slot games on krikay11 are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your player session identifier and game activity data to deliver the gaming experience, calculate outcomes, and resolve technical disputes. They do not receive your full KYC documents or financial account details.

Identity Verification Services

krikay11 uses trusted third-party KYC and identity verification services to assist in processing identity documents submitted by players. These services operate under strict data processing agreements and are prohibited from using your KYC data for any purpose other than identity verification on behalf of krikay11.

Fraud Prevention and Security

krikay11 may share IP addresses, device fingerprints, and flagged account activity data with industry-recognised fraud prevention networks and security intelligence services to protect the Platform and its players from fraudulent activity, money laundering, and account takeover attacks.

Legal and Regulatory Authorities

krikay11 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by a valid legal order, court direction, or applicable law. We will notify affected players of such disclosures where legally permitted to do so.

krikay11 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to enable core platform functionality, improve your user experience, and analyse aggregate usage patterns. The following table describes the categories of cookies used on the krikay11 Platform.

krikay11 does not use third-party advertising cookies, retargeting pixels, social media tracking pixels, or any technology designed to track your behaviour on websites other than krikay11 itself.

Most web browsers allow you to view, manage, and delete cookies through their settings menus. Disabling strictly necessary or security cookies will impair the functionality of the krikay11 Platform and may prevent you from logging in or completing transactions. krikay11 is not liable for Platform degradation resulting from a player's choice to disable required cookies.

krikay11 retains your personal data for as long as your account is active and for a defined period thereafter, as set out below. Retention periods reflect the minimum period required for legal compliance, financial record-keeping, and dispute resolution purposes.

All personal data stored by krikay11 is held on secured servers. Access to stored personal data is restricted to authorised krikay11 employees and contractors on a need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations. At the end of each applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

krikay11 respects your rights over your personal data. As a player on the krikay11 Platform, you are entitled to exercise the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at support@krikay11 with the subject line "Privacy Rights Request" and your registered account username.

• Right of Access: You may request a copy of all personal data that krikay11 holds about you. We will respond within 30 days of receiving a valid request and provide the data in a readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level corrections (name, address, mobile number), please contact support directly with documentary evidence of the correct information.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where the data has been processed unlawfully. Note that krikay11 may retain certain data beyond an erasure request where it is required to do so by law (e.g., transaction records retained for AML compliance).
• Right to Restrict Processing: You may request that krikay11 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request that krikay11 provide your personal data to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where krikay11 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To unsubscribe from marketing emails, use the unsubscribe link in any marketing email or contact support.
• Right to Object: You may object to the processing of your personal data where that processing is based on krikay11's legitimate interests. krikay11 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

krikay11 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect player data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and the krikay11 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to all pages including login, deposit, and account management screens.
• Password Hashing: Player passwords are never stored in plain text. krikay11 uses a strong, salted hashing algorithm (bcrypt) to store password data, meaning even krikay11 personnel cannot retrieve your original password — only reset it.
• Payment Tokenisation: bKash wallet numbers, Nagad account details, and card data are tokenised upon first use. Subsequent transactions use the token rather than the underlying account number, significantly reducing the risk of payment credential exposure.
• Two-Factor Authentication (2FA): krikay11 supports OTP-based two-factor authentication via registered Bangladeshi mobile number. Players are strongly encouraged to enable 2FA to add a second layer of protection to their accounts.
• Access Controls: Internal access to player personal data is governed by role-based access controls (RBAC). Only employees and contractors with a legitimate operational need are granted access to specific categories of player data, and all such access is logged and audited.
• Intrusion Detection: The krikay11 Platform is monitored around the clock for unusual activity patterns, including unusual login geography, brute-force attempts, and anomalous transaction volumes. Automated alerts trigger immediate review by our security team.
• Penetration Testing: krikay11 commissions periodic independent security assessments and penetration tests of the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

If you are a parent or guardian and believe your child has registered on krikay11 without your knowledge, please contact us immediately at support@krikay11 with the subject line "Underage Account Report". We will investigate and respond within 24 hours (BST).

krikay11 strongly recommends that parents and guardians in Bangladesh use parental control software to restrict access to online gambling websites on shared or family devices. Age verification at registration is a technical safeguard, not a replacement for responsible household device management.

krikay11 reserves the right to update or revise this Privacy Policy at any time. The most current version will always be available at /privacy-policy on the krikay11 website and will display the effective date and version number at the top of the document.

For material changes — those that significantly affect how your personal data is collected, used, or shared — krikay11 will notify you in advance via a platform notification on login and by email to your registered address, providing at least 7 days' notice before the changes take effect.

Minor updates, such as clarifications, corrections of typographical errors, or adjustments to reflect changes in third-party service providers, may be published without advance notice and take effect immediately. Your continued use of the krikay11 Platform after any update to this Privacy Policy constitutes your acknowledgement of the updated terms.

We encourage you to review this Privacy Policy periodically — particularly before making significant account changes such as updating your payment method, completing a large withdrawal, or requesting account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that krikay11 holds about you, please contact us using the details below. All privacy-related communications are handled by our dedicated data protection team.

• Email: support@krikay11 — use the subject line "Privacy Enquiry" for fastest routing.
• Response Time: Privacy enquiries are acknowledged within 5 business days (BST) and resolved within 30 calendar days.
• Language: Enquiries may be submitted in English. Our data protection team handles English-language requests directly.
• Live Support: For urgent account-security related privacy concerns, our 24/7 live chat and WhatsApp support team can assist with immediate account protection steps while a formal privacy review is initiated.