kekariya Privacy
Policy

kekariya collects personal data through several channels: directly from you when you register an account or use our services, automatically when you interact with the kekariya platform, and occasionally from third parties such as payment processors and identity verification providers. The categories of data we collect are described in detail below.

Registration and Account Data

When you create a kekariya account, we collect the following information: your full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to verify your identity, confirm that you meet the minimum age requirement of 18 years, and maintain your account in accordance with our Terms & Conditions.

Identity Verification Data

kekariya may request copies of government-issued identity documents such as your national ID card, passport, or driver's licence. These documents are collected solely for the purpose of confirming your identity and age, complying with applicable anti-money laundering (AML) obligations, and protecting all players on the platform from fraud. Document images are processed securely and are not used for any other purpose.

Financial and Transaction Data

To process deposits and withdrawals, kekariya collects data related to your payment method, including mobile banking account details (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank), and card details (Visa, Mastercard) where applicable. We record all transactions — deposits, withdrawals, bonus credits, and wagering activity — in your account history. We do not store full card numbers on our servers; card payments are processed via SSL-encrypted third-party payment gateways.

Usage and Behavioural Data

When you use the kekariya platform, we automatically collect certain technical and behavioural data, including: your IP address, device type, operating system, browser type and version, pages visited, games played, bet amounts and outcomes, session duration, and click-path data. This information helps us improve platform performance, detect fraudulent behaviour, personalise your experience, and ensure the integrity of our games.

Communications Data

If you contact kekariya's support team via email or live chat, we retain records of those communications, including the content of your messages and any attachments. This data is used to resolve your queries, train support staff, and maintain a record of interactions for quality assurance purposes.

Voluntary Submissions

From time to time, kekariya may invite players to participate in surveys, promotions, or feedback programmes. Any data you provide voluntarily through these channels is collected and processed in accordance with this Privacy Policy and the specific terms of the relevant survey or promotion.

kekariya may share your personal data with the following categories of third parties under the circumstances described:

• Payment Processors: When you make a deposit or request a withdrawal, kekariya shares the minimum necessary financial data with your selected payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard) to facilitate the transaction. These providers operate under their own privacy policies and are bound by applicable financial data protection obligations.
• Identity Verification Providers: kekariya uses trusted third-party KYC (Know Your Customer) and age verification services to validate identity documents. These providers receive copies of the documents you submit and return a verification result to kekariya. Document data is not retained by these providers beyond the period required for verification.
• Game Software Providers: Some games on the kekariya platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and game round IDs) to operate their games and audit outcomes. They do not receive your personally identifiable information beyond what is technically required for game delivery.
• Analytics and Security Providers: kekariya uses analytics and cybersecurity tools to monitor platform performance and detect threats. These tools may process technical data (IP addresses, device identifiers, session logs) on kekariya's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: kekariya may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of kekariya, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kekariya's business, your personal data may be transferred to the acquiring entity as part of the transaction. kekariya will notify affected players via their registered email address before any such transfer takes effect, and all data will remain subject to this Privacy Policy or an equivalent policy of at least equivalent protection.

All third-party service providers with whom kekariya shares personal data are required to maintain appropriate technical and organisational security measures and to process your data solely for the purposes for which it was shared. kekariya does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

kekariya retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, whichever is longer. The following retention periods apply to the main categories of data we hold:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of 5 years after account closure, in order to satisfy anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• Financial and Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in compliance with applicable financial regulations. Tax-related financial records may be retained for up to 7 years where required by law.
• Identity Verification Documents: Retained for the duration of your account and for 5 years following account closure. Document scans are stored in encrypted form on secure servers.
• Technical and Usage Data: Retained for up to 24 months from the date of collection in identifiable form, then anonymised for long-term analytics. Session logs used for fraud detection may be retained for up to 36 months.
• Marketing Consent Records: Retained for the duration of your marketing consent and for 3 years after consent is withdrawn, to demonstrate compliance with consent obligations.
• Support Communications: Retained for up to 3 years from the date of the final interaction, for quality assurance and dispute resolution purposes.

All personal data held by kekariya is stored on servers located in secure data centres with industry-standard physical and logical access controls. kekariya uses encrypted storage for sensitive data categories including identity documents and financial records. Where data is transferred to service providers outside Bangladesh, kekariya ensures that appropriate safeguards are in place to protect the security and integrity of your data during transfer and storage.

When your personal data is no longer required and the applicable retention period has expired, kekariya securely deletes or anonymises the data using industry-accepted destruction methods. Anonymised data (where no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a kekariya player, you have the following rights with respect to the personal data we hold about you. These rights may be exercised by contacting kekariya's support team at [email protected]. kekariya will respond to all rights requests within a reasonable timeframe, ordinarily within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data kekariya holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data kekariya holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update most account information directly through your kekariya account settings, or by contacting support.
• Right to Erasure: You have the right to request that kekariya delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent for processing based on consent. This right is subject to kekariya's legal obligations to retain certain data (such as financial records and AML-related data) for the periods specified in Section 5.
• Right to Restrict Processing: You have the right to request that kekariya restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that kekariya transmit that data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to kekariya processing your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests where you believe your individual rights and interests override kekariya's legitimate purposes.
• Right to Withdraw Consent: Where kekariya processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please send your request to [email protected] with the subject line "Privacy Rights Request" and include sufficient information to verify your identity. kekariya may need to confirm your identity before processing your request to prevent unauthorised access to your data by a third party.

kekariya will not charge a fee for processing reasonable rights requests. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive in nature — kekariya reserves the right to charge a reasonable administrative fee or to decline the request, and will inform you of the reason for doing so.