kriya Privacy Policy

1 Who We Are and How to Contact Us

kriya is an online casino and sports betting platform operating at kriya.lat, built specifically for players in Bangladesh and available to eligible users worldwide. kriya acts as the data controller in respect of the personal data you provide when registering and using the platform.

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact the kriya data team via:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the kriya platform, Bangladesh Standard Time (BST, UTC+6)

kriya aims to respond to all privacy-related enquiries within five business days of receipt.

2 Data We Collect

kriya collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically when you browse or play on the site; and occasionally from third parties such as payment processors and identity verification services. The categories of data we collect are set out below.

2.1 Information You Provide Directly

• Registration data: full legal name, date of birth, email address, mobile number, and residential address in Bangladesh or elsewhere.
• Identity verification (KYC) documents: copies of your National ID card, passport, or driving licence, and proof of address (utility bill, bank statement).
• Payment information: your bKash or Nagad mobile number, Rocket account reference, USDT / BTC / ETH wallet address, or card details (partial — kriya does not store full card numbers). We record the fact of each deposit and withdrawal but do not hold raw card data on our own servers.
• Support communications: the content of messages you send to our live chat team or to [email protected].
• Marketing preferences: your consent or opt-out status for promotional emails, SMS, and in-platform notifications.

2.2 Information Collected Automatically

• Technical data: your IP address, device type, operating system, browser version, screen resolution, and connection type.
• Session data: login timestamps, session duration, pages visited, and actions taken within the platform (games launched, bets placed, features used).
• Cookies and similar technologies: see Section 7 for a full explanation of how kriya uses cookies.
• Gameplay and wagering records: game round IDs, wager amounts, outcomes, and cumulative win/loss figures. These are stored for responsible gaming monitoring, bonus calculation, and dispute resolution.

2.3 Information from Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard confirm transaction status and, where required by anti-money laundering rules, may flag unusual payment patterns.
• Identity verification partners: where kriya uses a third-party KYC service to verify documents, that provider may return a verification result and a confidence score to kriya.
• Fraud detection services: industry-standard fraud and chargeback prevention tools may supply risk scores based on device fingerprinting and behavioural signals.

3 How We Use Your Data

kriya uses the personal data it collects for the following purposes, each of which rests on a specific lawful basis:

• Account creation and management — to register your account, verify your identity and age (18+), and maintain your account throughout its life. Lawful basis: performance of a contract.
• Payment processing — to facilitate deposits via bKash, Nagad, Rocket, Upay, and cryptocurrency, and to process withdrawals to your verified payment method. Lawful basis: performance of a contract.
• Legal and regulatory compliance — to comply with anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing obligations. This includes retaining transaction records for the legally required minimum period. Lawful basis: legal obligation.
• Security and fraud prevention — to monitor for suspicious activity, detect unauthorised access, investigate potential fraud, and protect the integrity of the platform. Lawful basis: legitimate interest.
• Responsible gaming — to monitor your gameplay patterns and identify signs of problem gambling, to apply the deposit limits and self-exclusion tools you set, and to reach out proactively where our systems detect a potential issue. Lawful basis: legitimate interest; performance of a contract.
• Customer support — to investigate and resolve your queries, complaints, and disputes, and to maintain records of support interactions for quality assurance. Lawful basis: legitimate interest; performance of a contract.
• Platform improvement — to analyse aggregated, anonymised usage data to understand how players engage with games and features, and to inform product development decisions. Lawful basis: legitimate interest.
• Personalisation — to tailor the games and promotions displayed to you based on your gameplay history and stated preferences. Lawful basis: legitimate interest (where no direct marketing is involved) or consent (where marketing personalisation is based on a specific opt-in).
• Marketing communications — to send you promotional emails, SMS messages, or in-platform notifications about kriya bonuses, new games, and seasonal events (such as BPL season, Eid, or Pohela Boishakh promotions) where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time.

4 Data Sharing and Third Parties

kriya shares personal data only in the circumstances set out below. We do not sell your data. Every third party with which kriya shares data is contractually required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

4.1 Payment Service Providers

To process deposits and withdrawals, kriya shares relevant transaction data (your account reference, amount, and payment method identifier) with bKash, Nagad, Rocket, Upay, and card scheme operators (Visa, Mastercard). Cryptocurrency transactions are processed on-chain and kriya shares your wallet address only with the relevant blockchain network.

4.2 Identity Verification (KYC) Partners

Where kriya uses a third-party identity verification service, it will share copies of the documents you submit with that provider for the sole purpose of verifying their authenticity. KYC partners are prohibited from retaining or further processing your documents after the verification is complete.

4.3 Fraud Prevention and Security Services

kriya uses industry-standard fraud prevention tools that may process your IP address, device fingerprint, and behavioural data to generate a risk assessment. This helps kriya protect the platform and all players from fraudulent activity and account takeovers.

4.4 Legal and Regulatory Authorities

kriya will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where it is legally required to do so or where disclosure is necessary to protect the rights, property, or safety of kriya, its players, or the public. kriya will only share the minimum data necessary in such circumstances.

4.5 Business Transfers

In the event that kriya undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by kriya may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.

5 International Data Transfers

kriya is a platform that serves players in Bangladesh and operates with technology infrastructure that may be hosted in data centres outside Bangladesh. Where your personal data is transferred to or processed in a country outside Bangladesh, kriya takes steps to ensure that an adequate level of protection is in place for that data.

These steps may include relying on standard contractual clauses approved by relevant data protection authorities, ensuring the recipient country has been assessed as providing an adequate level of data protection, or implementing binding corporate rules where data is transferred within a corporate group. If you would like more information about the safeguards in place for a specific international transfer, please contact us at [email protected].

6 Data Retention

kriya retains your personal data for no longer than is necessary for the purpose for which it was collected, taking into account any legal, accounting, or regulatory obligations that require longer retention. The general retention periods applied by kriya are:

• Account and identity data: retained for the lifetime of your account and for five years following permanent account closure, to satisfy AML and KYC regulatory requirements.
• Financial transaction records: retained for a minimum of five years from the date of each transaction, in line with anti-money laundering obligations.
• Contact and support communications data: retained for three years from the date of your most recent interaction with the kriya support team.
• Technical and session data: retained on a rolling 12-month basis; older records are deleted or anonymised on a scheduled basis.
• Marketing consent records: retained until you withdraw your consent, plus one year thereafter for audit purposes.
• KYC documents: retained for five years following account closure and then securely deleted unless a longer period is required by applicable law.

At the end of the applicable retention period, kriya will either securely delete your personal data or anonymise it such that it can no longer be linked back to you. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

7 Cookies and Similar Technologies

kriya uses cookies — small text files placed on your device — and similar tracking technologies (such as local storage and session tokens) to operate the platform and to understand how players use it. The categories of cookies used by kriya are as follows:

• Strictly necessary cookies: essential for the platform to function. These include your session authentication token, CSRF protection tokens, and preferences such as language settings. You cannot opt out of strictly necessary cookies without logging out of the platform.
• Functional cookies: remember your preferences (such as your chosen game lobby layout or notification settings) across sessions to provide a more personalised experience.
• Analytics cookies: collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. kriya uses this data to improve platform usability. Analytics cookies are only set with your consent.
• Security cookies: used by our fraud detection systems to maintain a device fingerprint for your current session, helping us identify and block unauthorised access attempts.

You can manage your cookie preferences through your browser settings or through the kriya cookie preference centre accessible from the platform footer. Please note that disabling functional or analytics cookies will not prevent you from using the kriya platform but may reduce the quality of your experience.

8 Your Rights Over Your Personal Data

As a kriya player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the kriya support team via live chat or at [email protected]. kriya aims to respond to all data rights requests within 30 days of receipt.

• Right of access: you may request a copy of all personal data kriya holds about you (a "subject access request"). kriya will provide this in a structured, commonly used, machine-readable format.
• Right to rectification: if any personal data kriya holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly from your account settings.
• Right to erasure ("right to be forgotten"): you may request that kriya delete your personal data. This right is subject to certain exceptions — for example, kriya cannot delete data that it is legally required to retain for AML compliance. Where deletion of all data is not possible, kriya will explain which data must be retained and why.
• Right to restriction of processing: you may ask kriya to pause processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: you may request a portable copy of the personal data you have provided to kriya, in a structured format (e.g., CSV), so that it can be transferred to another service provider.
• Right to object: you may object to kriya processing your data on the basis of legitimate interest (e.g., marketing personalisation or analytics). kriya will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent (e.g., receiving promotional emails), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9 Children and Under-18 Users

The kriya platform is strictly for adults aged 18 years and above. kriya does not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory part of the kriya registration and KYC process, and accounts opened by persons who are found to be under 18 will be immediately closed and any balance returned to the payment source.

If you believe that a minor has registered an account with kriya or that personal data belonging to a minor has been inadvertently collected, please contact us immediately at [email protected]. kriya will investigate and, where a minor's data is confirmed to have been collected, will delete it without delay.

Parents and guardians in Bangladesh are encouraged to use parental control software to prevent minors from accessing online gambling platforms. For more information, please visit the Responsible Gaming page.

10 Security of Your Personal Data

kriya takes the security of your personal data seriously and has implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: all data transmitted between your device and the kriya platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this connection is secure.
• Encryption at rest: personal data stored in kriya databases is encrypted at the storage layer.
• Access controls: access to personal data is restricted to authorised kriya staff on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication (2FA): kriya offers 2FA on player accounts as an additional layer of protection against unauthorised access. Players are strongly encouraged to enable 2FA in their account security settings.
• Regular security audits: kriya undergoes periodic security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in the platform.
• Incident response: in the event of a personal data breach that poses a risk to your rights and freedoms, kriya will notify affected players without undue delay and will take immediate steps to contain and investigate the incident.

While kriya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account safe by using a strong, unique password and by enabling 2FA. If you suspect that your account has been compromised, contact kriya support immediately via live chat or at [email protected].

11 Marketing Communications

With your consent, kriya may send you promotional communications by email, SMS, or in-platform notification. These may include information about new games (slots, live casino, crash games), sports betting promotions (BPL cricket season, IPL, T20 World Cup), welcome bonuses, reload bonuses, cashback offers, and seasonal promotions tied to events like Eid ul-Fitr, Eid ul-Adha, Pohela Boishakh (Bengali New Year), and Victory Day.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any promotional email from kriya.
• Updating your notification preferences in your account settings dashboard.
• Contacting the kriya support team via live chat or at [email protected] and requesting removal from marketing lists.

Opting out of marketing will not affect service communications — kriya will continue to send you important account-related emails such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts regardless of your marketing opt-out status.

12 Changes to This Privacy Policy

kriya reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify you by sending an email to the address registered on your account and by displaying a prominent notice on the kriya platform.

The effective date at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how kriya protects your personal data. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

The most current version of this Privacy Policy is always available at kriya.lat/privacy-policy.

13 Links to Third-Party Sites

The kriya platform does not include outbound links to third-party websites. However, our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) operate their own independent platforms and privacy policies. When you initiate a transaction through one of these providers, you will be subject to that provider's terms and privacy practices. kriya is not responsible for the privacy practices of any third-party payment provider and encourages you to review their privacy policies before transacting.

14 Complaints

If you are unhappy with how kriya has handled your personal data or with our response to a data rights request, you are entitled to lodge a complaint. The recommended process is:

• Step 1: Contact the kriya support team directly at [email protected] or via live chat, explaining your concern in detail. The support team will acknowledge your complaint within 24 hours and aim to resolve it within five business days.
• Step 2: If your complaint is not resolved to your satisfaction at Step 1, you may escalate it in writing to the kriya data protection team at [email protected], marking your message "Data Protection Escalation". A senior team member will review your complaint and provide a final written response within 14 business days.
• Step 3: If you remain dissatisfied after completing the internal complaints process, you may seek independent resolution through a competent authority or dispute resolution body in your jurisdiction.