kikiya Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") describes how kikiya ("we", "us", "our", or the "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or the "Player") who access or use the online casino and sports betting platform available at https://kikiya.bid.

kikiya is committed to handling your personal data with integrity, transparency, and care. This Policy has been written to give you a clear and honest picture of our data practices, and to inform you of the rights you hold in relation to the personal data we process. We encourage you to read this document carefully before registering an account or continuing to use the Platform.

This Policy should be read alongside kikiya's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of conflict between those documents and this Policy on a data-related matter, this Policy shall prevail.

2. Data We Collect

2.1 Registration Data

When you create a kikiya account, we collect the information you provide during the registration process. This typically includes your full name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh), mobile phone number, and email address. This information is required to establish your identity, verify your eligibility to use the Platform, and administer your account.

2.2 Identity Verification Data

To comply with our anti-money laundering obligations and age verification requirements, we may request copies of government-issued identity documents such as your National ID card, passport, or driver's licence, as well as proof of address documents such as utility bills or bank statements. These documents are handled with the highest level of care and are not retained longer than necessary for verification and regulatory purposes.

2.3 Financial Data

We collect information about your deposits and withdrawals, including transaction amounts, timestamps, and the payment methods used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard). We do not store full card numbers or mobile banking PINs on our servers; payment credential processing is handled by our PCI-DSS compliant payment partners.

2.4 Gameplay and Betting Data

We record details of your activity on the Platform, including games played, bets placed, wagering amounts, game results, session durations, and bonus usage. This data is used for account management, dispute resolution, fraud detection, responsible gaming monitoring, and product improvement.

2.5 Technical and Device Data

When you access the kikiya Platform, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This information helps us maintain Platform security, diagnose technical issues, and understand how players interact with our services.

2.6 Communications Data

If you contact kikiya's customer support team — whether by email, live chat, or other means — we retain records of those communications, including your queries, our responses, and any attachments you provide. These records allow us to maintain quality of service, resolve disputes, and comply with our record-keeping obligations.

2.7 Marketing Preferences

If you opt in to receive promotional communications from kikiya, we record your marketing preferences and the channels through which you have consented to be contacted. You may update or withdraw your marketing consent at any time by contacting [email protected] or by following the unsubscribe instructions in any marketing message.

3. How We Use Your Data

kikiya uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Name, date of birth, address, mobile number, email address
Identity and age verification	Government ID documents, proof of address, date of birth
Payment processing	Transaction data, payment method details (tokenised)
Fraud prevention and security	IP address, device data, login history, transaction patterns
Responsible gaming monitoring	Gameplay data, session duration, wagering history, deposit patterns
Customer support	Communications data, account data, transaction data
Platform analytics and improvement	Technical data, gameplay data (aggregated and anonymised where possible)
Marketing communications (opt-in only)	Email address, mobile number, marketing preferences
Legal and regulatory compliance	All categories as required by applicable obligations

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing an alternative lawful basis for doing so.

4. Legal Basis for Processing

kikiya processes personal data on the following legal bases, depending on the specific activity and the nature of the data involved:

• Contractual necessity: Processing that is necessary to perform the contract between you and kikiya — for example, processing your registration details to create your account, or processing your payment data to handle your deposits and withdrawals.
• Legitimate interests: Processing that is necessary for kikiya's legitimate business interests, provided those interests are not overridden by your own rights and interests — for example, using technical and device data to detect and prevent fraud, or using aggregated gameplay data to improve our services.
• Legal obligation: Processing that is required to comply with applicable laws — for example, retaining transaction records for anti-money laundering purposes or sharing data with law enforcement authorities when legally required to do so.
• Consent: Processing that is based on your freely given, informed, and specific consent — for example, sending you promotional emails or SMS messages about kikiya's offers. You may withdraw consent at any time without this affecting the lawfulness of processing carried out before the withdrawal.

5. Sharing Your Data

kikiya does not sell, rent, or otherwise trade your personal data to third parties for commercial gain. We share data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with our payment partners, which currently include bKash, Nagad, Rocket, Upay, and card processing networks operating on behalf of Visa and Mastercard. These partners are contractually bound to handle your data securely and in accordance with applicable financial regulations.

5.2 Game Providers

kikiya's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain technical and gameplay data may be shared with that studio for the purpose of delivering the game, resolving technical issues, and maintaining fair play integrity.

5.3 Identity Verification Partners

We work with specialist identity verification providers to confirm the identity and age of our players. Where your documents are submitted through a third-party verification service, that service will process your data in accordance with its own privacy policy, a copy of which is available upon request.

5.4 Legal and Regulatory Authorities

kikiya may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities in response to lawful requests, court orders, or legal proceedings. We will endeavour to notify you of any such disclosure unless we are legally prohibited from doing so or where notification would prejudice an investigation.

5.5 Business Transfers

In the event that kikiya or any part of its business is acquired, merged with another entity, or otherwise transferred, your personal data may be included among the assets transferred to the acquiring party. You will be notified of any such transfer in advance, and your rights under this Policy will continue to apply.

6. Cookies & Tracking Technologies

kikiya uses cookies — small text files placed on your device — and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The categories of cookies we use are described in the table below:

Cookie Type	Purpose	Retention
Strictly Necessary	Maintain your login session, remember your basket or game state, enable secure authentication	Session or up to 30 days
Functional	Remember your preferences (e.g., language, display settings), personalise your experience	Up to 1 year
Analytics	Understand how players use the Platform, identify popular games and pages, diagnose errors	Up to 2 years
Security	Detect and prevent fraud, identify suspicious login patterns, protect account integrity	Up to 1 year

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly — for example, you may be unable to remain logged in across pages. Disabling analytics or functional cookies will not affect your ability to use core Platform features.

7. Data Retention

kikiya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account's active life on the Platform.
• Account closure data: Following account closure, core account records (including identity documents and transaction history) are retained for a minimum of five years to meet anti-money laundering and regulatory obligations.
• Communications records: Support communications are retained for up to three years after the closure of the relevant support ticket.
• Marketing data: Retained until you withdraw your marketing consent, after which it is deleted or anonymised within 30 days.
• Technical and device data: Retained for up to 12 months in identifiable form; thereafter may be retained in anonymised, aggregated form for analytics purposes.
• Responsible gaming records: Self-exclusion records and associated account data are retained for the duration of the exclusion period plus five years, in accordance with responsible gaming best practices.

When personal data is no longer required for any legitimate purpose, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

8. Data Security

kikiya takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and payment-related records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their role.
• Regular security assessments, penetration testing, and vulnerability scanning of our infrastructure.
• Secure, audited processes for handling identity documents submitted during the verification process.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Staff training on data protection obligations and secure data handling practices.

While kikiya takes every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kikiya will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

9. Your Rights

As a player using kikiya's Platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of them, please contact our support team at [email protected] from the email address registered to your account.

• Right of access: You may request a copy of the personal data kikiya holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as a misspelled name) can often be handled directly through your account settings.
• Right to erasure: Subject to our legal retention obligations, you may request that we delete your personal data. We will honour deletion requests where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires us to retain it.
• Right to restrict processing: In certain circumstances, you may request that we limit the way in which we use your data — for example, while you contest the accuracy of the data or while an objection is being considered.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object: You have the right to object to processing of your personal data that is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is required for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kikiya will acknowledge all rights requests within five business days and will aim to resolve them within 30 days. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case we will inform you of the extension and the reasons for it.

10. Minors & Age Verification

The kikiya Platform is strictly intended for adults aged 18 and above. We do not knowingly collect or process personal data relating to individuals under the age of 18. Age verification is a mandatory step in the registration process, and we may request documentary proof of age at any time.

If we become aware that a person under the age of 18 has created an account or provided personal data to kikiya, we will take immediate steps to close the account, delete the associated personal data (subject to any legal obligations to retain evidence of the breach), and, where appropriate, notify relevant authorities.

11. International Data Transfers

kikiya's primary operations are directed at the Bangladesh market and our core infrastructure is designed with this in mind. However, some of the third-party service providers we work with — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process data on servers located outside Bangladesh.

Where personal data is transferred to a third country, kikiya takes steps to ensure that an appropriate level of protection is maintained. This may include entering into data transfer agreements incorporating standard contractual clauses, or relying on the third party's adherence to internationally recognised security standards. You may request information about the specific safeguards in place for any given transfer by contacting [email protected].

12. Third-Party Links and Services

The kikiya Platform may contain references to third-party services or game providers. This Privacy Policy applies solely to data collected and processed by kikiya directly. It does not extend to any third-party websites, services, or platforms that may be accessible through or in connection with the kikiya Platform.

kikiya is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service you interact with, particularly payment partners and game providers, before sharing personal data with them.

13. Changes to This Policy

kikiya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will notify registered players via the email address or mobile number on file and/or by a prominent notice on the Platform, no less than 7 days before the changes take effect.

The "Last Updated" date displayed at the top of this page reflects when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which kikiya handles your personal data, we encourage you to contact our support team in the first instance. We aim to resolve all privacy-related enquiries promptly and in good faith.

If you are not satisfied with our response after raising a complaint directly with us, you may wish to seek independent advice or contact a relevant consumer protection body in your jurisdiction. kikiya is committed to resolving all privacy concerns fairly and transparently, and will cooperate fully with any formal enquiry process.