Data & Privacy
At kirkiri, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, why we collect it, how it is stored and protected, and what rights you have over your own information. We believe in plain-language transparency — no confusing legalese, no hidden data practices.
Please read this Privacy Policy carefully. By registering a kirkiri account or using any feature of the kirkiri platform, you confirm that you have read and understood this policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the kirkiri platform and contact us to request account closure.
kirkiri collects personal data from users in Bangladesh and from any other jurisdiction that accesses the kirkiri platform. We collect only the data that is genuinely necessary to deliver a safe, compliant, and personalised betting and casino experience. The categories of information we collect are described below.
When you create a kirkiri account, we collect the following information:
As part of our Know Your Customer (KYC) compliance process, we may collect copies of government-issued identity documents, including your National ID Card, passport, or birth certificate. We also collect proof of your registered payment method (e.g., confirmation that a bKash number is held in your name) and, where required, proof of address in Bangladesh such as a utility bill or bank statement.
KYC documents are stored in encrypted form on secure servers and are only accessed by kirkiri's verified compliance team members on a need-to-know basis. They are never shared with marketing partners or used for any purpose beyond identity verification and fraud prevention.
When you make deposits or withdrawals, kirkiri records the following financial data:
kirkiri does not store full card numbers or mobile banking PINs on its own servers. Card payments and mobile wallet transactions are processed via PCI-DSS compliant third-party payment gateways.
kirkiri records detailed logs of your in-platform activity, including bets placed, games played, odds accepted, live markets accessed, crash game sessions, and slot game sessions. This data is used for bet settlement, dispute resolution, responsible gaming monitoring, and platform improvement. Game session data from third-party providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) is transmitted to kirkiri in summarised form and subject to those providers' own data handling practices.
When you access the kirkiri platform, we automatically collect certain technical data, including:
If you contact kirkiri support via Live Chat, email, or WhatsApp, we retain records of those communications — including your messages, our responses, and any attachments you send — for a minimum of 3 years. This helps us track the history of any account dispute, bonus query, or responsible gaming request accurately.
kirkiri uses personal data only for legitimate purposes directly related to operating a safe, fair, and compliant online betting and casino platform for Bangladesh-based players. We do not sell personal data to third parties for advertising purposes, and we do not use your data to build profiles for use outside the kirkiri platform.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & login | Name, email, mobile number, password | Contract performance |
| Age & identity verification (KYC) | NID / passport, date of birth, address proof | Legal obligation |
| Processing deposits & withdrawals | Payment method details, transaction records | Contract performance |
| Bet settlement & game delivery | Gameplay logs, betting history | Contract performance |
| Fraud prevention & security | IP address, device data, transaction patterns | Legitimate interest |
| Responsible gaming monitoring | Betting frequency, session duration, deposit patterns | Legal obligation / Legitimate interest |
| Customer support & dispute resolution | Communication records, account history | Contract performance |
| Platform analytics & improvement | Anonymised usage data, session data | Legitimate interest |
| Marketing communications (opted-in users) | Email address, game preferences | Consent |
kirkiri will only send you promotional emails, SMS messages, or WhatsApp notifications if you have explicitly opted in to receive marketing communications during account registration or in your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Withdrawing marketing consent does not affect your ability to use the kirkiri platform or receive essential service communications (such as deposit confirmations, withdrawal status updates, security alerts, and KYC request notifications).
kirkiri uses automated systems to detect unusual account activity, identify potential cases of bonus abuse, flag responsible gaming concerns, and enforce geolocation restrictions. Where an automated system triggers a restriction on your account (such as a temporary suspension or a withdrawal hold), you have the right to request a manual review of that decision by contacting our support team. No final account closure decision is made solely by an automated system without human review.
kirkiri does not sell, rent, or trade your personal data with any third party. We share personal data only in the specific, limited circumstances described below, and only to the extent strictly necessary for each purpose.
To process deposits and withdrawals in BDT, kirkiri shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing gateways for Visa and Mastercard. These providers receive only the minimum data required to complete the transaction — typically your mobile number or masked card reference and the transaction amount. They operate under their own privacy policies and are contractually bound to process your data only for payment completion purposes.
To deliver live casino, slot, and instant game content, kirkiri shares a session token and anonymised player identifier with providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your real name, NID details, or mobile number. Game session results are transmitted back to kirkiri for bet settlement purposes. All provider integrations operate under data processing agreements that restrict secondary use of player data.
kirkiri may be required to share personal data with law enforcement agencies, financial intelligence units, or other regulatory bodies where we receive a lawful request, court order, or where we are legally obligated to report suspicious transaction activity. In such cases, we will share only the data specifically requested and will not volunteer additional information beyond what is legally required.
kirkiri uses third-party cloud infrastructure and cybersecurity services to operate the platform. These service providers act as data processors on kirkiri's behalf and are contractually prohibited from accessing, using, or disclosing user data for any purpose other than delivering the infrastructure services kirkiri has engaged them for. All infrastructure partners are required to maintain security standards consistent with ISO 27001 or equivalent frameworks.
kirkiri never sells your personal data to advertising networks, data brokers, affiliate marketing platforms, or any third party for commercial gain. Your data is an asset we protect on your behalf — it is not a product we monetise.
kirkiri uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform effectively, maintain your login session, remember your preferences, and analyse how users interact with the site. By continuing to use kirkiri.vip, you consent to the use of cookies as described in this section.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Maintains your logged-in session, stores your active bet slip, and enables core platform functionality. Cannot be disabled without breaking core features. | Session (expires on logout) |
| Preference | Remembers your language setting, odds format preference, and notification settings between sessions. | 12 months |
| Analytics | Collects anonymised data on page visits, feature usage, and session duration to help kirkiri improve the platform experience. | 6 months |
| Security | Stores a device fingerprint to detect suspicious login attempts from unrecognised devices and support two-factor authentication flows. | 30 days |
| Performance | Caches static assets and API responses to reduce page load times, particularly during BPL and IPL live betting periods when traffic spikes occur. | 7 days |
You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive alerts when a new cookie is set. Please note that disabling essential cookies will prevent you from logging in to the kirkiri platform and will break core betting and payment functionality. Preference and analytics cookies can be disabled without affecting core functionality. Instructions for managing cookies in common browsers are available in your browser's help documentation.
kirkiri does not use cross-site tracking cookies or serve third-party advertising cookies. The analytics data we collect via cookies is held internally and is never shared with advertising platforms or data brokers.
kirkiri retains personal data for as long as it is necessary to deliver the services you have requested, comply with our legal obligations, resolve disputes, and enforce our Terms & Conditions. The following retention periods apply to the main categories of data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Fraud prevention, legal obligation |
| KYC identity documents | Duration of account + 5 years after closure | AML / compliance obligation |
| Transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Gameplay & betting logs | 3 years from session date | Dispute resolution, RG monitoring |
| Support communications | 3 years from last communication | Dispute history, quality assurance |
| Cookie / analytics data | As per cookie duration (see Section 4) | Platform improvement |
| Self-exclusion records | Permanently retained | Responsible gaming obligation |
kirkiri stores user data on secure cloud infrastructure. All data associated with Bangladesh-based players is stored on servers that are subject to encryption at rest using AES-256 encryption. Data in transit between your device and the kirkiri platform is protected by TLS 1.3 (256-bit SSL). Backup copies of user data are maintained in geographically separate secure environments and are subject to the same encryption and access controls as primary data stores.
If you close your kirkiri account and request deletion of your personal data, kirkiri will delete or anonymise all data that it is not legally required to retain within 30 days of verifying your identity and confirming the closure request. Data that must be retained for legal compliance purposes (such as transaction records and KYC documents) will be securely isolated from active systems and deleted at the end of the applicable statutory retention period.
As a user of the kirkiri platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 14 business days of verifying your identity.
You have the right to request a copy of all personal data that kirkiri holds about you. This includes your registration data, KYC documents, transaction history, betting logs, and support communication records. We will provide this data in a structured, machine-readable format (JSON or CSV) upon verified request.
If any personal data kirkiri holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or phone number) can be made directly from your account settings. Corrections to identity data (name, date of birth) require submission of updated KYC documentation.
You have the right to request deletion of your personal data. kirkiri will honour erasure requests subject to our legal retention obligations described in Section 5. Data that must be retained for anti-money-laundering (AML) compliance, financial record-keeping, or fraud prevention purposes cannot be deleted before the end of the applicable statutory period, but will be isolated from active processing systems.
You may object to the processing of your personal data for direct marketing purposes at any time by updating your notification settings within your kirkiri account or by contacting support at [email protected]. Objection to marketing processing will be actioned within 5 business days.
You have the right to receive a copy of the personal data you have provided to kirkiri in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.
kirkiri does not charge any fee for privacy rights requests. All requests are processed in good faith and in accordance with applicable data protection principles. We will always verify your identity before processing any request that involves disclosure or deletion of personal data.
kirkiri implements a layered security framework to protect user data from unauthorised access, disclosure, alteration, and destruction. Our security posture is reviewed and updated regularly to address emerging threats and reflect best practices in online gaming platform security.
In the event of a personal data breach that poses a risk to user rights and freedoms, kirkiri will notify affected users via the email address registered to their account within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps kirkiri has taken or will take to address the breach.
If you suspect your kirkiri account has been compromised: contact support immediately at [email protected] with the subject line "Account Security Concern". Our team will place a precautionary hold on your account while the matter is investigated. Do not share your password or 2FA codes with any person claiming to be kirkiri staff — kirkiri will never ask for these details.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how kirkiri has handled your personal data, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.
kirkiri may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, registered users will be notified via the email address associated with their account at least 7 days before the updated policy takes effect. The "Effective date" at the top of this page reflects when the current version came into force. Continued use of the kirkiri platform after the effective date of an updated Privacy Policy constitutes acceptance of the changes.
For responsible gaming support — including self-exclusion requests, deposit limit adjustments, and problem gambling guidance — please visit the Responsible Gaming page. Privacy and responsible gaming requests are handled by separate specialist teams to ensure both are given the dedicated attention they require.
Our Commitment to You
kirkiri's approach to data protection goes beyond compliance checkboxes . Every feature we build, every partner we onboard, and every system we deploy is evaluated through a privacy-first lens.
All data transmitted between your device and kirkiri is protected by TLS 1.3, ensuring your login credentials, payment details, and betting activity are never exposed in transit.
kirkiri never sells, rents, or trades your personal data with advertisers or data brokers. Your information exists solely to power your gaming experience and keep your account secure.
From your account settings, you can update personal details, manage marketing preferences, request your data, and initiate account closure — all without needing to contact support for basic changes.
Identity documents submitted for KYC verification are stored in AES-256 encrypted vaults, accessible only to kirkiri's verified compliance team. They are never passed to marketing partners.
We keep your data only for as long as legally required or necessary for account operation. Once the retention period expires, data is securely deleted or anonymised — no indefinite storage.
Promotional communications are strictly opt-in. If you change your mind, you can unsubscribe at any time from your account settings. Withdrawing consent takes effect within 5 business days.
Continue Exploring kirkiri
Our support team is available around the clock to help with data requests, account settings, and any privacy-related concerns. You can also explore our FAQ for quick answers, review our Responsible Gaming policy, or head back to the kirkiri platform.