krekya Privacy Policy

1 Definitions

In this Privacy Policy, the following terms shall have the meanings set out below unless the context otherwise requires:

• "krekya", "we", "us", "our" — the krekya platform operating at krekya.biz and all associated services, features, and interfaces.
• "Player", "you", "your" — any individual who accesses, registers on, or otherwise uses the krekya Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, postal address, email address, mobile phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Platform" — the krekya website at krekya.biz and any associated mobile-optimised interface accessible to Players.
• "Cookie" — a small data file stored on a Player's device by their web browser at the instruction of the krekya Platform, used for session management, preference storage, and analytical purposes.
• "Third-Party Service Provider" — any external organisation engaged by krekya to provide services in connection with the operation of the Platform, including payment processors, identity verification services, and game content providers.
• "BST" — Bangladesh Standard Time, UTC+6.

2 Who We Are

2.1 krekya is an online casino and sports betting platform operating at krekya.biz, designed for adult players in Bangladesh. We provide a wide range of gaming and betting services, including live casino games, slot games, sports betting markets (including cricket, football, kabaddi, and other sports), and virtual games.

2.2 For the purposes of this Privacy Policy, krekya acts as the data controller in respect of Personal Data collected from Players through the Platform. As data controller, krekya determines the purposes for which, and the means by which, Personal Data is processed.

2.3 All enquiries relating to this Privacy Policy, including requests to exercise data subject rights, should be directed to our support team at: [email protected]. Our support team operates 24 hours a day, 7 days a week in Bangladesh Standard Time (BST, UTC+6).

3 Data We Collect

3.1 krekya collects the following categories of Personal Data from Players:

3.2 krekya does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a person, except where the collection of a selfie photograph is required as part of a mandated identity verification process.

3.3 Where krekya requests Personal Data as a mandatory requirement (for example, during account registration or KYC verification), failure to provide that data may mean that krekya is unable to open, maintain, or reinstate the Player's account, or process deposits and withdrawals.

4 How We Collect Your Data

4.1 krekya collects Personal Data through the following means:

• Direct interactions — Data you provide when completing the registration form, submitting identity verification documents, making a deposit or withdrawal, completing responsible gaming tool settings, or contacting our support team.
• Automated technical collection — Data collected automatically when you access or use the Platform, including through cookies, web server logs, and session-tracking technology. This includes IP addresses, device identifiers, browser type and version, and navigation data.
• Third-party verification providers — Identity and address data returned to krekya by third-party identity verification services engaged to fulfil our Know Your Customer obligations.
• Payment processors — Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, relating to deposit and withdrawal activity on a Player's account.
• Game providers — Game outcome and transaction data provided by game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe, for the purposes of transaction logging, dispute resolution, and responsible gaming monitoring.

5 How We Use Your Data

5.1 krekya uses the Personal Data it collects for the following purposes:

• Account creation and management — To open, verify, maintain, and, where necessary, close a Player's krekya account.
• Identity and age verification — To fulfil our obligation to verify that Players are aged 18 or above before allowing participation in real-money gaming or betting activity.
• Payment processing — To process deposits and withdrawals via the Player's chosen payment method, reconcile transactions, and investigate payment queries.
• Game and bet transaction logging — To maintain an accurate and auditable record of all bets placed, games played, and outcomes achieved, which serves as the definitive record in the event of any dispute.
• Responsible gaming compliance — To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion orders, and deliver responsible gaming interventions where warranted.
• Fraud prevention and security — To detect and prevent multi-accounting, bonus abuse, unauthorised account access, and other forms of fraudulent or prohibited conduct as defined in the krekya Terms & Conditions.
• Customer support — To respond to Player enquiries, complaints, and requests received via live chat or email.
• Legal and regulatory compliance — To comply with applicable legal obligations, including Anti-Money Laundering (AML) requirements, record-keeping obligations, and responses to lawful requests from competent authorities.
• Platform improvement — To analyse anonymised or aggregated usage data in order to improve the performance, usability, and content of the krekya Platform.
• Marketing communications (opt-in only) — To send promotional offers, bonus notifications, and platform updates to Players who have explicitly opted in to receive such communications. Players may withdraw their consent and opt out at any time by contacting [email protected].

6 Legal Basis for Processing

6.1 krekya processes Personal Data on the following legal bases:

• Contractual necessity — Processing that is necessary for the performance of the contract between krekya and the Player, including account registration, payment processing, game transaction logging, and customer support.
• Legal obligation — Processing that krekya is required to carry out to comply with applicable legal and regulatory requirements, including age and identity verification and Anti-Money Laundering record-keeping.
• Legitimate interests — Processing carried out in pursuit of krekya's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and Platform improvement analytics, provided that such interests are not overridden by the Player's data protection rights.
• Consent — Processing carried out on the basis of the Player's freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. Consent may be withdrawn at any time without detriment to the Player's account standing.

7 Data Sharing & Disclosure

7.1 krekya does not sell, rent, or trade Personal Data to any third party for that party's own independent commercial purposes.

7.2 krekya may share Personal Data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, for the processing of deposit and withdrawal transactions.
• Identity verification service providers — Third-party KYC and AML compliance providers engaged to verify Player identity and age, and to conduct sanctions screening.
• Game content providers — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and other licensed game providers, for the purpose of game delivery, RNG certification, and transaction data exchange.
• IT infrastructure and hosting providers — Entities providing server hosting, cloud storage, database management, and cybersecurity services that underpin the krekya Platform, operating under strict data processing agreements.
• Legal and regulatory authorities — Where krekya is required by applicable law, court order, or lawful regulatory request to disclose Personal Data to a competent authority. krekya will notify the Player of such a disclosure wherever legally permissible.

7.3 All Third-Party Service Providers engaged by krekya are required to process Personal Data only in accordance with krekya's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

7.4 In the event of a corporate restructuring, merger, acquisition, or sale of all or a portion of krekya's assets, Personal Data held by krekya may be transferred to the relevant successor entity, subject to equivalent data protection standards being maintained.

8 Cookies & Tracking Technologies

8.1 krekya uses cookies and similar tracking technologies on the Platform for the following purposes:

8.2 Strictly Necessary cookies are essential for the Platform to function and cannot be disabled without impairing core functionality. All other cookie categories may be managed through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and configure alerts when cookies are set.

8.3 Please note that disabling Functional or Analytical cookies may reduce the quality of your experience on the Platform, as personalised settings will no longer be preserved between sessions.

8.4 krekya does not currently use third-party advertising or retargeting cookies that track Players across unaffiliated websites for the purpose of delivering targeted advertising.

9 Data Security

9.1 krekya implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Player devices and krekya servers.
• Encrypted storage of all sensitive Personal Data at rest, including identity documents, payment method references, and account credentials.
• Password hashing using industry-standard one-way cryptographic algorithms. krekya stores only the hash, not the plain-text password. krekya staff cannot retrieve or read a Player's password.
• Role-based access controls ensuring that krekya personnel can access Personal Data only to the extent required by their specific job function.
• Regular security assessments including vulnerability scanning and penetration testing of the Platform infrastructure.
• Session timeout mechanisms that automatically terminate inactive sessions after a defined period.
• Multi-factor authentication for krekya staff accessing internal systems that contain Personal Data.

9.2 In the event of a Personal Data breach that is likely to result in a risk to the rights and freedoms of affected Players, krekya will take prompt remedial action and will notify affected Players without undue delay, providing details of the nature of the breach, the data categories affected, and the steps Players should take to protect themselves.

10 Data Retention

10.1 krekya retains Personal Data for as long as it is necessary to fulfil the purpose for which it was collected, and for no longer than required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data — Retained for the full duration of the Player's account and for a minimum period of 5 years following permanent account closure, in accordance with Anti-Money Laundering record-keeping requirements.
• Financial transaction records — Retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• Game and bet transaction logs — Retained for a minimum of 3 years from the date of the transaction, and for such longer period as may be required to resolve any open dispute or legal claim.
• Customer support communications — Retained for a minimum of 2 years from the date of the communication, to facilitate follow-up enquiries and dispute resolution.
• Responsible gaming records — Retained for the full duration of a self-exclusion period and for a minimum of 5 years thereafter, to prevent re-registration during any active exclusion and to demonstrate compliance with responsible gaming obligations.
• Marketing consent records — Retained for the lifetime of the Player's account and for 1 year following account closure or withdrawal of consent, as evidence of the consent given.

10.2 Upon expiry of the applicable retention period, Personal Data will be securely deleted, permanently anonymised, or otherwise disposed of in a manner that prevents reconstruction or re-identification.

11 Your Data Rights

11.1 krekya recognises and respects the following rights of Players in relation to their Personal Data:

• Right of access — You have the right to request a copy of the Personal Data krekya holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification — You have the right to request that krekya correct any inaccurate or incomplete Personal Data held about you. You may update standard account details (such as contact information) directly within your account dashboard.
• Right to erasure — You have the right to request that krekya delete your Personal Data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected. This right is subject to krekya's legal obligations to retain certain data, as described in Clause 10.
• Right to restriction of processing — You have the right to request that krekya restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability — Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the Personal Data you provided to krekya.
• Right to object — You have the right to object to krekya's processing of your Personal Data where that processing is based on legitimate interests, including profiling for responsible gaming purposes. krekya will consider and respond to all such objections, though certain processing may continue where krekya has compelling legitimate grounds.
• Right to withdraw consent — Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of the rights listed above, please contact krekya support at [email protected]. krekya will acknowledge your request within 5 business days and aim to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, krekya may extend this period by a further 30 days, with prior notice to the Player.

11.3 krekya will not charge a fee for the exercise of any data subject right unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

12 Children's Privacy

12.1 The krekya Platform is strictly intended for adults aged 18 years and above. krekya does not knowingly collect, process, or retain Personal Data from individuals under the age of 18.

12.2 Age verification is a mandatory step in the krekya account registration process. Any account found to belong to an individual under the age of 18 will be immediately and permanently closed, all funds will be forfeited, and any Personal Data collected will be deleted as soon as practicable following closure of the account, subject to any mandatory retention obligations.

12.3 If you are a parent or guardian and believe that a minor has registered an account on the krekya Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 Changes to This Privacy Policy

13.1 krekya reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the way in which the Platform operates. The updated Privacy Policy will be published on the krekya Platform with a revised effective date.

13.2 Where an amendment is material — meaning it significantly affects the way krekya processes your Personal Data or alters your rights — krekya will endeavour to provide reasonable advance notice through the Platform or by email to your registered address before the change takes effect.

13.3 Your continued use of the krekya Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how krekya is protecting your data.

14 Contact Us

14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy, or wish to exercise any of your data subject rights, please contact the krekya data privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available via your krekya account dashboard after login, 24 hours a day, 7 days a week in Bangladesh Standard Time (BST, UTC+6).

14.2 krekya aims to acknowledge all data privacy enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex requests, krekya may extend this period by a further 30 days with prior notification.

14.3 For general support enquiries unrelated to data privacy, including account, payment, or game queries, please use the same contact channels and our support team will direct your enquiry to the appropriate team member.