kricky Privacy
Policy

01 Information We Collect

When you register for an account, use any service on the kricky platform, or contact our support team, we collect personal data that falls into the following categories. We collect only the information that is necessary for the purpose stated and do not gather data beyond what is proportionate to that purpose.

Registration & Identity Data

When you create a kricky account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, and a username of your choosing. This information is required to create and administer your account, verify your identity as required by our Know Your Customer (KYC) procedures, and comply with our legal obligations.

Identity Verification (KYC) Documents

As part of our KYC process, we may ask you to provide copies of government-issued identification documents — such as your National Identity Card, Passport, or Driving Licence — together with proof of address and, where applicable, evidence of the source of funds deposited. These documents are processed and stored securely and are used solely for identity verification and anti-money laundering (AML) compliance purposes.

Financial & Transaction Data

We record all financial transactions conducted through your kricky account, including deposits made via bKash, Nagad, Rocket, Upay, or supported bank channels, withdrawals, bonus credits and forfeits, and wagering history. This data is necessary for account management, fraud detection, financial reporting, and regulatory compliance. We do not store full payment method credentials — payment processing is handled by your chosen mobile financial service provider or bank.

Technical & Usage Data

We automatically collect certain technical information when you access the kricky platform, including your IP address, browser type and version, operating system, device identifier, screen resolution, session timestamps, pages visited, click-path data, and game interaction logs. This data helps us diagnose technical issues, optimise platform performance, and detect unusual activity that may indicate fraud or unauthorised access.

Communications Data

When you contact our support team via email or live chat, we retain a record of the conversation, including any personal information you choose to share within that communication. This allows us to track support history and provide consistent, informed assistance across multiple interactions.

02 How We Use Your Data

kricky processes your personal data on several lawful bases depending on the nature of the processing activity. The primary bases we rely on are: performance of the contract between you and kricky (i.e., providing the service you signed up for); compliance with legal obligations (KYC, AML, age verification); our legitimate interests in operating a safe and commercially viable platform; and, where required, your explicit consent.

The specific purposes for which we use your data are as follows:

• Account Management: Creating, maintaining, and administering your kricky account, including processing deposits and withdrawals, applying bonus credits, and tracking your wagering activity.
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years before permitting access to real-money gaming.
• Fraud Prevention & Security: Monitoring account and transaction activity for signs of fraudulent behaviour, account takeover, bonus abuse, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Using gaming behaviour data — including session length, deposit frequency, and wagering patterns — to identify players who may be experiencing gambling-related harm and to apply appropriate safeguards such as deposit limits or account reviews.
• Customer Support: Responding to your queries, complaints, and service requests in an informed and timely manner, using the communication history associated with your account.
• Legal & Regulatory Compliance: Fulfilling our obligations under applicable laws, including cooperating with lawful requests from regulatory or law enforcement authorities in Bangladesh.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the kricky platform, identify areas for improvement, and develop new features and game categories.
• Marketing (with consent): Sending you promotional offers, bonus announcements, and event-related communications relevant to your interests — such as BPL season promotions, Eid bonus campaigns, or new game launches — where you have opted in to receive marketing messages.

03 Data Sharing & Third Parties

kricky does not sell, rent, or trade your personal data to any third party. We share data with external organisations only where it is necessary to deliver the platform and services you use, to comply with legal obligations, or to protect the integrity of the platform. All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection standards.

Game Technology Providers

To deliver the full game library available on kricky — including live casino games from Evolution Gaming and Ezugi, slots from Pragmatic Play, NetEnt, and Microgaming, and crash games from Spribe — limited technical data such as your player session token and game stake values are transmitted to these providers' systems at the time of game launch. These providers do not receive your full identity data and are contractually prohibited from using game session data for their own commercial purposes.

Payment Processors

When you initiate a deposit or withdrawal, the transaction details necessary to complete the payment — such as your account reference and the transaction amount — are shared with your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay) or bank. kricky does not receive or store your mobile banking PIN, password, or full account credentials at any stage of this process.

Identity Verification Services

Where we use a third-party identity verification partner to assist with KYC document review, your submitted identity documents and associated data may be processed by that partner on our behalf. All such partners operate under strict data processing agreements and may not retain or use your documents for any purpose beyond the verification task.

Legal & Regulatory Disclosure

kricky may be required to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities in Bangladesh or other applicable jurisdictions in response to lawful requests, court orders, or legal process. We will notify you of any such disclosure where we are legally permitted to do so.

04 Cookies & Tracking Technologies

The kricky website uses cookies and similar technologies — including local storage objects and session tokens — to operate core platform functions, remember your preferences, and gather anonymous analytics data. This section explains what types of cookies we use and how you can manage them.

Essential Cookies

These cookies are strictly necessary for the kricky platform to function. They include your authenticated session token (which keeps you logged in during a session), security cookies that protect against cross-site request forgery, and cookies that maintain your account-specific settings such as your language preference. Essential cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies

We use privacy-respecting analytics tools to collect anonymised data about how players navigate and interact with the kricky website — including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used only in aggregate form and is never linked back to your individual identity. You may opt out of analytics cookies via your browser settings or by contacting our support team.

Functional Cookies

Functional cookies remember your preferences and choices to provide a more personalised experience — for example, remembering your preferred game category, your last stake size in a game, or whether you have dismissed a notification. These cookies do not track your activity across other websites.

Managing Your Cookie Preferences

Most browsers allow you to control cookies through their settings — you can block, delete, or restrict cookies at the browser level. Please note that blocking essential cookies will impair your ability to log in and use the kricky platform. To opt out of specific non-essential cookies, you may also contact our support team at [email protected] and we will process your request within five (5) business days.

05 Data Security & Retention

kricky applies a layered approach to data security, combining technical safeguards, operational controls, and staff training to protect your personal data from unauthorised access, loss, or misuse.

Technical Safeguards

All data transmitted between your browser or mobile device and the kricky platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. Our servers are hosted in access-controlled environments with firewall protection, intrusion detection systems, and regular vulnerability scanning. Passwords are stored as salted hashes and are never stored or transmitted in plain text.

Operational Controls

Access to player personal data within kricky's internal systems is restricted on a strict need-to-know basis. Staff members who access player data do so only in the performance of their specific operational role — such as KYC review, fraud investigation, or customer support — and all such access is logged and auditable. We conduct regular internal security reviews to ensure access controls remain appropriate.

Data Retention Periods

We retain your personal data for as long as your kricky account is active and for a defined period thereafter, as set out below. Retention periods are set to satisfy our legal and regulatory obligations and are not extended beyond what is necessary for the stated purpose.

• Account & Identity Data: Retained for the duration of your account and for five (5) years following account closure, in compliance with our AML record-keeping obligations.
• Financial Transaction Records: Retained for seven (7) years following each transaction date, in accordance with financial record-keeping requirements.
• Gaming History: Retained for three (3) years following your last active session, then anonymised and retained in aggregate form for platform analytics.
• Support Communications: Retained for two (2) years from the date of the final message in a support thread, then deleted unless retention is required for an ongoing dispute.
• Marketing Consent Records: Retained for the duration of your marketing opt-in and for one (1) year following any opt-out, as evidence of your consent status.

06 Your Privacy Rights

As a player on the kricky platform, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. All requests are handled by our support team and processed within thirty (30) calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data kricky holds about you, together with an explanation of how it is being used and with whom it has been shared.
• Right to Rectification: If any of your personal data held by kricky is inaccurate or out of date, you have the right to request that it be corrected. For account-level details such as your registered email or address, you may also update these directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that we may be unable to delete data that we are legally required to retain — such as KYC records and financial transaction histories — even following account closure.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute is under investigation — you may request that we pause our processing of your personal data without deleting it.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to kricky, which you can then transfer to another service provider of your choice.
• Right to Withdraw Consent: Where our processing of your data is based on your consent — primarily in the context of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of any processing that occurred before the withdrawal.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, in which case we will reassess whether our legitimate interests override your individual rights in the specific circumstances.

To exercise any of the rights listed above, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge receipt within two (2) business days and aim to fulfil the request within thirty (30) calendar days. Verification of your identity will be required before any data is released or amended.

07 Marketing Communications

kricky sends marketing communications — including promotional offer emails, bonus notifications, and event-related messages such as BPL season campaigns, Eid bonus announcements, and new game launch updates — only to players who have explicitly opted in to receive such communications during the account registration process or through their account settings at a later date.

We do not send unsolicited marketing messages. Every marketing email sent by kricky includes a clearly visible unsubscribe link that allows you to opt out of future messages with a single click. Opt-out requests are processed within five (5) business days, after which no further promotional messages will be sent to the unsubscribed address.

Please note that opting out of marketing communications does not affect the sending of transactional messages — such as deposit confirmations, withdrawal notifications, KYC requests, or account security alerts — as these are essential to the operation of your account and are not marketing in nature.

08 Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kricky handles your personal data, please contact our support team using the details below. All privacy-related queries are treated with priority and handled by team members with specific data protection training.

For general privacy enquiries, rights requests, or complaints regarding data handling:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Privacy Rights Request" to ensure your message is directed to the correct team.
• Response Time: We aim to acknowledge all privacy-related correspondence within two (2) business days and to provide a substantive response or resolution within thirty (30) calendar days.
• Support Hours: Our team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (UTC+6).

kricky is committed to resolving all privacy concerns raised directly by players. If you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

This Privacy Policy may be updated from time to time to reflect changes in our data practices, applicable law, or the services we provide. The most current version of the policy will always be available at kricky.net/privacy-policy, and the effective date at the top of the document will reflect when the latest revision was made. For material changes, we will send a notification to your registered email address at least seven (7) days before the new version takes effect.