Privacy Policy — kriky11

kriky11 collects personal data from you in three principal ways: (a) information you provide directly during registration and account management; (b) information generated automatically through your use of the platform; and (c) information received from third-party service providers such as payment processors and identity verification services. We collect only the minimum data necessary to provide our services and fulfil our legal obligations.

Information you provide directly:

• Full legal name;
• Date of birth (required for age verification);
• Residential address (city, division, and postcode within Bangladesh);
• Valid email address;
• Mobile phone number (particularly for bKash, Nagad, Rocket, and Upay wallet linking);
• Username and encrypted password;
• Government-issued identity document details (National Identity Card number, passport number, or driving licence number) submitted during KYC verification;
• Payment method details (mobile wallet number, bank account reference — not full card numbers);
• Communications sent to customer support, including emails to support@kriky11 and live chat transcripts.

Information collected automatically:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and time spent on each page;
• Game session data including games played, bet amounts, win/loss outcomes, and session duration;
• Referring URL (the webpage that directed you to kriky11);
• Cookie identifiers and similar tracking technologies (see Section 4 for full details);
• Transaction logs, including deposit amounts, withdrawal requests, and payment method used.

Information received from third parties:

• Identity verification results from KYC/AML screening services;
• Transaction confirmation references from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa/Mastercard networks);
• Fraud and risk scoring data from third-party compliance tools used to protect the integrity of the platform.

kriky11 processes your personal data only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The table below summarises the key processing activities, the data categories involved, and the lawful basis for each:

Where we rely on consent as the lawful basis for processing (primarily for marketing communications), you may withdraw that consent at any time by updating your notification preferences in your account settings or by emailing support@kriky11. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kriky11 does not make any solely automated decisions about you that produce significant legal or similarly significant effects, except where required for mandatory fraud and AML screening. Where such automated processing occurs, you have the right to request human review of the decision.

kriky11 does not sell, lease, or transfer your personal data to third parties for their own marketing or commercial purposes. We share your data with carefully selected third-party service providers only to the extent necessary to operate the platform and comply with our legal obligations. All third-party processors are bound by strict data processing agreements and are required to handle your data only in accordance with our instructions.

Categories of third parties with whom we share data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card network processors (Visa/Mastercard) receive the minimum data necessary to process your deposit or withdrawal transaction. These processors operate under their own privacy policies and are subject to their own regulatory obligations.
• Identity verification and KYC providers: We use third-party services to verify the authenticity of identity documents and to screen players against anti-money laundering (AML) and sanctions databases. These providers receive your name, date of birth, ID document reference, and the document image you submit.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (game ID, bet amount, outcome) to facilitate game delivery and audit game integrity. These providers do not receive your name, address, or payment details.
• IT infrastructure and hosting providers: Our platform is hosted on secure server infrastructure. Our hosting partners have access to technical data for the purpose of maintaining platform availability and security. They are not permitted to use this data for any other purpose.
• Legal and regulatory authorities: kriky11 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law or valid legal process. We will notify you of any such disclosure where we are legally permitted to do so.
• Professional advisers: Our legal advisers, auditors, and financial consultants may have access to relevant account data where strictly necessary for the provision of professional services, subject to confidentiality obligations.

kriky11 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to understand how players interact with the website so that we can continue to improve the experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of cookies used by kriky11:

• Strictly necessary cookies: These are essential for the platform to operate. They maintain your login session, remember your currency preference (BDT), and protect the platform against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your platform preferences such as preferred game category, notification settings, and language display. They are not strictly necessary but significantly improve your experience on kriky11.
• Analytics cookies: We use anonymised analytics data to understand which pages and games are most popular, how players navigate the site, and where technical errors occur. This data is aggregated and does not identify individual players.
• Security cookies: Short-lived cookies used to detect and prevent fraudulent access attempts, including account takeover and credential stuffing attacks.

kriky11 does not use third-party advertising cookies, behavioural retargeting cookies, or social media tracking pixels. We do not participate in cross-site advertising networks.

You can manage or delete cookies through your browser's settings menu. Please note that disabling strictly necessary cookies will prevent you from logging into your kriky11 account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. Most modern browsers (Chrome, Firefox, Safari, Edge) provide granular cookie management tools under their Privacy or Security settings sections.

kriky11 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. We apply the principle of data minimisation: once data is no longer required for its stated purpose and there is no legal obligation to retain it, it is securely deleted or permanently anonymised.

The following retention periods apply as a general guide:

• Active account data (name, contact details, KYC documents, account preferences): Retained for the duration of your active account relationship with kriky11, plus a minimum of five (5) years following account closure to comply with AML record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history, game session logs): Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• Customer support communications (emails, chat logs): Retained for three (3) years from the date of last contact, or for the duration of any ongoing dispute, whichever is longer.
• Marketing consent records: Retained for three (3) years from the date of last consent renewal or until consent is withdrawn, to provide an auditable record of consent status.
• Security and fraud logs (IP addresses, device fingerprints, failed login attempts): Retained for twelve (12) months, unless required for longer as part of an active fraud investigation or law enforcement request.
• Analytics data: Aggregated and anonymised analytics data has no fixed deletion schedule, as it no longer constitutes personal data once fully anonymised.

Following the expiry of the applicable retention period, personal data is either permanently deleted from our systems or rendered irreversibly anonymous. Backup copies of data are subject to the same retention schedules and are purged from backup storage on the same timeline as live data.

Where you request deletion of your personal data under your right to erasure (see Section 6), kriky11 will assess the request against our legal retention obligations. Where we are required by law to retain certain data (for example, transaction records for AML compliance), we will explain the basis for retention and delete all other data that is not subject to a legal hold.

kriky11 recognises and respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please email support@kriky11 with the subject line "Privacy Rights Request" and include your registered email address and the specific right you wish to exercise. We will respond within 30 calendar days.

• Right of access: You may request a copy of all personal data we hold about you, together with information about how it is processed, the lawful basis for processing, and the categories of recipients with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For changes to core account details (name, address, date of birth), documentary evidence may be required.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to our legal retention obligations as described in Section 5.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is under consideration.
• Right to data portability: You may request a copy of the personal data you have provided to kriky11 in a structured, commonly used, machine-readable format (such as CSV or JSON), where technically feasible.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, in which case we will assess whether our interests are overridden by your rights.
• Right to withdraw consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

kriky11 will not charge a fee for processing privacy rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. We will notify you in advance if any fee applies before proceeding with the request.

Protecting your personal data from unauthorised access, disclosure, alteration, and destruction is a core operational priority at kriky11. We implement a layered set of technical and organisational security measures designed to safeguard data at rest, in transit, and during processing.

Technical security measures include:

• SSL/TLS encryption for all data transmitted between your device and the kriky11 servers;
• AES-256 encryption for sensitive data stored in our databases, including identity document references and payment method tokens;
• Bcrypt password hashing — your account password is never stored in plain text and cannot be retrieved by kriky11 staff;
• Two-factor authentication (2FA) available for player accounts as an optional additional security layer;
• Automated intrusion detection systems monitoring for unusual access patterns, brute-force login attempts, and anomalous transaction activity;
• Regular independent security audits and penetration testing of the kriky11 platform;
• Strict firewall rules and network segmentation to isolate player data from public-facing infrastructure.

Organisational security measures include:

• Role-based access controls ensuring that staff members can only access the minimum data necessary for their specific job function;
• Mandatory data protection and security training for all staff with access to player data;
• A formal data breach response procedure, including notification protocols in the event of a significant security incident affecting player data;
• Strict vetting of all third-party processors before engagement, including review of their own security certifications and data handling practices.

Despite these measures, no internet-based platform can guarantee absolute security. You also have an important role to play in keeping your account secure: use a strong, unique password for your kriky11 account, do not share your login credentials with anyone, and contact support@kriky11 immediately if you suspect unauthorised access to your account.

kriky11 reviews this Privacy Policy regularly and may update it to reflect changes in our data processing practices, new platform features, changes in applicable law, or feedback from players. The "Last updated" date at the top of this page indicates when the most recent revision was made.

Where we make material changes to this Privacy Policy — particularly changes that affect how we collect, use, or share your personal data — we will notify registered players via the email address on file at least 14 calendar days before the changes take effect. For minor or administrative updates that do not materially affect your rights, we will update the policy on the website without individual notification.

Your continued use of kriky11 following the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you must stop using the platform and contact us to close your account.

How to contact us about privacy matters:

• General privacy enquiries: Email support@kriky11 with the subject line "Privacy Enquiry".
• Privacy rights requests (access, rectification, erasure, portability, objection): Email support@kriky11 with the subject line "Privacy Rights Request".
• Data breach reports (if you believe your account has been compromised): Email support@kriky11 with the subject line "Security Incident" for urgent handling.
• Marketing opt-out: Email support@kriky11 with the subject line "Unsubscribe" or update your preferences directly in your account settings.

We aim to respond to all privacy-related enquiries within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

kriky11 is committed to resolving privacy concerns directly and promptly. We encourage you to contact us in the first instance before taking any formal action. All privacy correspondence is treated with complete confidentiality and handled by our dedicated support team.