Privacy Policy — kirikex Bangladesh Gaming Platform

This Privacy Policy ("Policy") describes how kirikex ("we", "us", "our") collects, processes, stores and protects the personal data of individuals ("you", "the Player") who access or use the kirikex online gaming platform. This Policy applies to all services offered through the kirikex website, including sports betting, live casino, slots, lottery and bingo products, and is directed primarily at players located in Bangladesh.

By creating an account on kirikex, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the platform and contact us to close your account.

1. Information We Collect

kirikex collects personal data that you provide directly to us, data generated through your use of the platform, and in limited circumstances, data obtained from trusted third-party sources for verification purposes. The categories of data we collect are described below.

1.1 Registration and Account Data

When you register an account on kirikex, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 18+ age requirement);
• Residential address in Bangladesh (city, district, postal code);
• Mobile phone number (used for account security and SMS verification);
• Email address (used for account communications and password recovery);
• Chosen username and encrypted password.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer ("KYC") obligations and to prevent fraud and underage gambling, we may request copies of:

• Government-issued photo identification (National ID Card, passport, or driving licence);
• Proof of residential address (utility bill or bank statement dated within the last three months);
• Proof of payment method ownership (e.g., a screenshot of the bKash or Nagad account registered in your name).

1.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect transaction records including payment method details, transaction amounts in Bangladeshi Taka, timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs on our servers — payment processing is handled by our PCI-DSS-compliant payment partners.

1.4 Usage and Behavioural Data

We automatically collect data about how you interact with the kirikex platform, including:

• IP address and approximate geographic location (city/district level);
• Device type, operating system, and browser version;
• Pages visited, game sessions played, bet history, and session duration;
• Responsible gaming tool usage (deposit limits set, self-exclusion periods);
• Log data including error reports and crash analytics.

1.5 Communications Data

When you contact kirikex via live chat, email or any other support channel, we retain records of that correspondence — including the content of messages, timestamps, and the nature of any query or complaint — for quality assurance, training and dispute resolution purposes.

2. How We Use Your Personal Data

kirikex processes personal data only for lawful, specified and legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary processing activities and their legal basis.

2.1 Marketing Communications

kirikex will only send you promotional emails or SMS messages regarding offers, bonuses, BPL and IPL cricket betting promotions, or seasonal campaigns (such as Eid and Pohela Boishakh specials) if you have explicitly opted in to receive such communications during registration or through your account settings. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Opting out of marketing communications does not affect service-related communications such as transaction confirmations, withdrawal notifications or security alerts, which are sent as a necessary part of account management.

3. Cookies and Tracking Technologies

kirikex uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain session security, and understand how players interact with our service. A cookie is a small text file placed on your device when you visit our website.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your game state across page navigation, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: We use anonymised analytics data to understand platform usage patterns — for example, which game categories are most popular among Bangladesh players or which pages generate the most support queries. This data is used solely to improve the kirikex experience and is not shared with advertising networks.
• Functional Cookies: These remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations.

3.2 What We Do Not Use

kirikex does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie that tracks your browsing activity on websites other than kirikex. We do not use Google Ads conversion tracking or Facebook Pixel on this platform.

3.3 Managing Cookies

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will prevent you from logging in or using the platform. Disabling performance cookies will not affect your ability to play games or make transactions, but it may limit our ability to diagnose and resolve technical issues you encounter.

4. Data Sharing and Third-Party Disclosure

kirikex does not sell, rent or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

4.1 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, we share transaction data with our payment processing partners. These partners are contractually required to process your data solely for the purpose of completing the relevant financial transaction and are prohibited from using it for any other purpose. Dutch-Bangla Bank, City Bank and other banking partners receive only the information necessary to execute a bank transfer.

4.2 Identity Verification Providers

kirikex works with third-party KYC and identity verification services to validate the authenticity of documents submitted during account verification. These providers operate under strict data-processing agreements and are certified to handle sensitive identity documents securely. KYC data is not retained by these providers beyond the period necessary to complete the verification check.

4.3 Game Content Providers

Game software on kirikex is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive anonymised session data (such as bet amounts and game round identifiers) to support game result verification and RNG audit trails. They do not receive your name, contact details, or payment information.

4.4 Legal and Regulatory Disclosure

kirikex may disclose personal data to law enforcement, regulators, or other competent authorities where we are legally required to do so, or where such disclosure is necessary to protect the safety of our players, prevent fraud, or defend our legal rights. We will always seek to limit such disclosures to the minimum data required and will notify affected players where permitted by law to do so.

5. Data Retention and Storage

kirikex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

When the applicable retention period expires, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual. All data is stored on servers with access controls, encryption at rest, and regular security auditing.

6. Your Privacy Rights

Players based in Bangladesh retain the following rights in respect of the personal data held by kirikex. To exercise any of these rights, please contact our support team in writing at support@kirikex (plain text — not a clickable link). We will acknowledge your request within 5 working days and aim to provide a substantive response within 30 calendar days.

Please note that certain rights may be limited where kirikex has an overriding legal obligation to retain or process the data in question — for example, financial transaction records required for anti-money-laundering compliance. Where this applies, we will explain the limitation clearly in our response to your request.

7. Data Security Measures

kirikex implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our key security practices include:

• Encryption in Transit: All data exchanged between your device and kirikex servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all login, registration, payment, and game-play communications.
• Encryption at Rest: Sensitive data including identity documents and payment records is encrypted when stored on our servers using AES-256 encryption.
• Access Controls: Personal data is accessible only to kirikex employees and contractors who require it to perform their specific role. Access is granted on a least-privilege basis and is subject to formal access review.
• Multi-Factor Authentication: Administrative access to systems storing personal data requires multi-factor authentication. We strongly recommend that players also enable two-factor authentication on their kirikex account for additional security.
• Penetration Testing: kirikex conducts regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights or interests, kirikex will notify affected players promptly and take immediate remediation steps.

8. Updates to This Privacy Policy

kirikex reserves the right to update this Privacy Policy at any time in response to changes in applicable law, our data processing practices, the services we offer, or feedback from our players. When material changes are made to this Policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the kirikex platform upon their next login.

The date of the most recent revision is always displayed at the top of this Policy as "Last Updated". We encourage you to review this Policy periodically to remain informed about how kirikex protects your personal data. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

8.1 Contact Us About Privacy

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by kirikex, please contact our Data Privacy team in writing. We will respond within 30 calendar days of receiving your request. Contact details:

• Email (plain text): support@kirikex
• Live Chat: Available 24/7 within the kirikex platform
• Response time: Acknowledgement within 24 hours; full response within 30 calendar days