Privacy & Data

Kiriya Privacy Policy — Your Data, Protected

At Kiriya, your personal information is treated with the same care we put into every part of the platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have over it. No jargon, no surprises.

Last updated: 1 January 2025
🔒
How We Protect You

Privacy at Kiriya — The Key Points

These cards cover the most important aspects of how Kiriya handles your data. The full policy is below.

Minimal Data Collection

Kiriya only collects the data it genuinely needs to operate your account, process payments, and comply with legal requirements. We don't collect data for the sake of it.

256-Bit SSL Encryption

All data transmitted between your device and Kiriya's servers is encrypted using 256-bit SSL — the same standard used by banks. Your information is protected in transit at all times.

No Data Selling

Kiriya does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information stays within the Kiriya ecosystem and its trusted service partners.

Your Rights, Respected

You have the right to access, correct, or delete your personal data held by Kiriya. Submit a request to [email protected] and we'll respond within 30 days.

Local Payment Privacy

When you transact via bKash, Nagad, or Rocket, Kiriya receives only the minimum information needed to process the transaction. Your full wallet credentials are never stored by Kiriya.

Transparent Cookie Use

Kiriya uses cookies to keep you logged in, remember your preferences, and improve platform performance. You can manage cookie preferences in your browser settings at any time.

Full Policy

Kiriya Privacy Policy

1. Who We Are

Kiriya ("we", "us", "our") is the operator of the online gaming platform accessible at kiriya.io. Kiriya is the data controller responsible for the personal information collected through this platform. This Privacy Policy applies to all users of the Kiriya website, mobile platform, and any related services.

Kiriya is built specifically for players in Bangladesh. All services are provided in Bangladeshi Taka (BDT), and all payment integrations — bKash, Nagad, and Rocket — are designed with the Bangladeshi user in mind. This local focus extends to how we handle your data: we understand the context you're operating in, and we take our responsibility to protect your privacy seriously.

If you have any questions about this Privacy Policy or how Kiriya handles your personal data, you can contact us at [email protected] at any time.

Plain language note: This policy is written to be understood, not to confuse. If anything here is unclear, reach out to Kiriya support before you register. We'd rather answer your questions upfront than have you agree to something you don't fully understand.

2. Data We Collect

Kiriya collects personal data in several ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers. Here is a breakdown of what we collect and when:

Category Examples When Collected
Identity Data Full name, date of birth, national ID number Registration & KYC verification
Contact Data Mobile number, email address Registration
Financial Data Transaction amounts, payment method type, transaction reference numbers Deposits & withdrawals
Technical Data IP address, device type, browser, operating system Every platform visit
Usage Data Games played, bet amounts, session duration, login history During active sessions
Communications Data Support chat transcripts, email correspondence When you contact support

Kiriya does not collect your full mobile wallet PIN, password, or any credentials associated with your bKash, Nagad, or Rocket account. Payment transactions are processed through secure third-party gateways, and Kiriya only receives a transaction confirmation and reference number.

KYC documents: When you submit identity documents for verification, those documents are reviewed by Kiriya's compliance team and stored securely. They are used solely for the purpose of verifying your identity and are not shared with third parties except where required by law.

3. How We Use Your Data

Kiriya uses your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was collected. The main purposes are:

  • Account management: To create, maintain, and secure your Kiriya account, including verifying your identity and age.
  • Payment processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
  • Legal compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection regulations.
  • Fraud prevention: To detect, investigate, and prevent fraudulent activity, account abuse, and other prohibited conduct on the Kiriya platform.
  • Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
  • Platform improvement: To analyse usage patterns and technical performance data in order to improve the Kiriya platform and user experience.
  • Responsible gaming: To monitor gameplay patterns and identify players who may need support, in line with our Responsible Gaming Policy.
  • Marketing communications: To send you promotional offers and updates, but only where you have given explicit consent. You can opt out at any time.

No profiling for third-party advertising: Kiriya does not build advertising profiles on its players or share usage data with advertising networks. Any analysis of your data is done internally and solely for the purposes listed above.

4. Legal Basis for Processing

Kiriya processes your personal data on the following legal grounds, depending on the specific purpose:

  • Contractual necessity: Processing required to fulfil our obligations to you under the Kiriya Terms and Conditions — for example, processing your deposits and withdrawals.
  • Legal obligation: Processing required to comply with applicable laws and regulations, including AML and KYC requirements.
  • Legitimate interests: Processing carried out for Kiriya's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time by contacting [email protected].

5. Data Sharing

Kiriya does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

  • Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and security standards.
  • Identity verification providers: Third-party KYC service providers may process your identity documents on Kiriya's behalf. They are bound by strict data processing agreements.
  • Game providers: Game software providers may receive anonymised session data for the purpose of game performance monitoring. No personally identifiable information is shared with game providers.
  • Regulatory authorities: Kiriya may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts where legally obligated to do so.
  • Business transfers: In the event of a merger, acquisition, or sale of Kiriya's business, your data may be transferred to the acquiring entity. You will be notified of any such transfer.

Data processing agreements: All third parties who process personal data on Kiriya's behalf are required to sign data processing agreements that obligate them to handle your data securely and only for the specified purpose.

6. Data Retention

Kiriya retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal retention obligations. The general retention periods are:

  • Account data: Retained for the duration of your account and for five years after account closure, in line with standard AML record-keeping requirements.
  • Transaction records: Retained for a minimum of five years from the date of the transaction.
  • KYC documents: Retained for five years after the end of the business relationship.
  • Support communications: Retained for two years from the date of the last interaction.
  • Technical and usage data: Retained for up to 24 months, after which it is anonymised or deleted.

When data is no longer required, Kiriya deletes or anonymises it securely. You may request early deletion of your data, subject to Kiriya's legal retention obligations — some data cannot be deleted before the mandatory retention period has elapsed.

7. Cookies & Tracking

Kiriya uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the Kiriya website. They help us keep you logged in, remember your preferences, and understand how the platform is being used.

The types of cookies Kiriya uses:

  • Essential cookies: Required for the platform to function. These cannot be disabled without breaking core functionality such as login sessions and payment flows.
  • Performance cookies: Collect anonymised data about how players use the platform — for example, which pages are visited most often. This data is used to improve the platform.
  • Preference cookies: Remember your settings and preferences, such as language and display options.
  • Security cookies: Used to detect and prevent fraudulent activity and unauthorised access attempts.

Kiriya does not use third-party advertising cookies or tracking pixels for external ad targeting. You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies may affect your ability to use the Kiriya platform.

8. Security

Kiriya takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration:

  • 256-bit SSL encryption for all data transmitted between your device and Kiriya's servers.
  • Encrypted storage of sensitive data, including identity documents and financial records.
  • Access controls that restrict internal access to personal data on a strict need-to-know basis.
  • Regular security audits and penetration testing of the Kiriya platform.
  • Two-factor authentication available for all player accounts.
  • Automated fraud detection systems that monitor transactions and login activity in real time.

Despite these measures, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Kiriya will notify you and the relevant authorities as required by applicable law.

Your role in security: Kiriya's security measures are most effective when combined with good practices on your end. Use a strong, unique password for your Kiriya account, enable two-factor authentication, and never share your login credentials with anyone.

9. Your Rights

You have a number of rights in relation to the personal data Kiriya holds about you. To exercise any of these rights, contact Kiriya at [email protected]. We will respond within 30 days.

Right of Access

Request a copy of the personal data Kiriya holds about you, along with information about how it is used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held by Kiriya.

Right to Erasure

Request deletion of your personal data, subject to Kiriya's legal retention obligations.

Right to Restriction

Request that Kiriya restricts processing of your data in certain circumstances, such as while a dispute is being resolved.

Right to Portability

Request a copy of your data in a structured, machine-readable format so you can transfer it to another service.

Right to Object

Object to Kiriya processing your data for direct marketing or on the basis of legitimate interests.

10. Children

The Kiriya platform is strictly for adults aged 18 and over. Kiriya does not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered on Kiriya or provided personal data to us, please contact [email protected] immediately. We will investigate and, if confirmed, delete the data and close the account without delay.

Kiriya uses age verification checks during the registration process to minimise the risk of underage access. However, if you are a parent or guardian and have concerns about a minor accessing the Kiriya platform, we encourage you to use parental control software and to speak with your child about responsible internet use.

11. Changes to This Policy

Kiriya may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes that materially affect how we use your personal data, Kiriya will notify registered players via email or an in-platform notification before the changes take effect. Your continued use of the Kiriya platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

Stay informed: We recommend reviewing this page periodically. The "Last updated" date at the top of this page tells you when the policy was most recently revised. If you have questions about any changes, contact [email protected].

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Kiriya handles your personal data, please get in touch:

  • Email: [email protected]
  • Live chat: Available 24/7 via the chat icon in your Kiriya account.
  • Response time: Kiriya aims to respond to all privacy-related enquiries within 30 days.

For data access, correction, or deletion requests, please include your registered email address and a brief description of your request. We may need to verify your identity before processing the request to ensure your data is protected.

Safe & Secure

Your Privacy is Protected — Play with Confidence

Kiriya is built for Bangladesh — local payments, local language, and a platform that respects your data. Register in minutes and start playing today.