Privacy Policy for krekaya

1. Data We Collect

krekaya collects personal data from you in the course of operating the platform, processing your transactions, verifying your identity, and communicating with you. The categories of personal data we collect are set out below. We collect only what is necessary and proportionate to the purpose for which it is being processed.

1.1 Registration Data

When you create a krekaya account, we collect: your full legal name, date of birth, email address, mobile phone number (including the number registered with your bKash or Nagad account), residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), and a username and password of your choosing. This information is required to create and maintain your account and to verify that you are at least 18 years of age.

1.2 Identity Verification (KYC) Data

For the purposes of Know Your Customer (KYC) compliance, krekaya may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request a selfie photograph and proof of your payment method (for example, a screenshot of your bKash or Nagad wallet confirming account ownership). This data is processed solely for identity verification and fraud prevention purposes.

1.3 Financial Transaction Data

krekaya records all deposits, withdrawals, bonus credits, and wager transactions associated with your account. This includes transaction amounts in Bangladeshi Taka (BDT), timestamps in Bangladesh Standard Time (BST, UTC+6), payment method identifiers (such as your bKash or Nagad mobile number), and transaction reference numbers. This data is retained for financial reconciliation and regulatory compliance purposes.

1.4 Technical and Device Data

When you access the krekaya platform via a web browser or mobile device, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, screen resolution, session duration, and pages visited. This data is used for platform security, fraud detection, and analytics purposes. It does not, by itself, personally identify you.

1.5 Communications Data

If you contact the krekaya support team via live chat, email at [email protected], or WhatsApp, we retain records of those communications for quality assurance, dispute resolution, and staff training purposes. Communications records are stored for a minimum of 12 months from the date of the interaction.

1.6 Behavioural and Gaming Data

krekaya records gameplay activity including games played, bet amounts, session lengths, bonus usage, and win/loss history. This data is used to ensure platform integrity, personalise your gaming experience where applicable, detect problem gambling patterns, and fulfil responsible gaming obligations.

2. How We Use Your Data

krekaya processes your personal data for specific, legitimate purposes only. The table below summarises the primary purposes for which your data is used and the legal basis for each processing activity.

2.1 Marketing Communications

krekaya will only send you promotional communications — including information about bonuses, seasonal promotions (such as those tied to BPL, IPL, Eid, or Pohela Boishakh), and new game launches — if you have explicitly opted in to receiving such communications during registration or subsequently through your account settings. You may withdraw consent for marketing at any time with immediate effect. Withdrawing marketing consent does not affect your ability to use the platform or receive service-related communications.

2.2 Automated Decision-Making

krekaya uses automated systems to detect fraudulent activity, assess risk, and flag accounts for responsible gaming intervention. These systems may result in automated account restrictions. Where an automated decision significantly affects you, you have the right to request a human review of that decision by contacting our support team at [email protected].

2.3 Profiling

krekaya may analyse your gaming behaviour and transaction patterns to identify signs of problem gambling and to offer responsible gaming interventions. This profiling is carried out in your interests and in compliance with our responsible gaming obligations. It is not used to target you with advertising for additional gambling products beyond the krekaya platform itself.

3. Cookies & Tracking

The krekaya website and platform use cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to gather anonymised analytics data that helps us improve the player experience.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and session. Cookies do not contain executable code and cannot carry viruses. Most web browsers accept cookies by default, but you can modify your browser settings to refuse them — though this may impact certain functionality on the krekaya platform.

3.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your authenticated state, and handle security tokens. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and last-visited game categories to personalise your experience on krekaya.
• Analytics Cookies: These collect anonymised data about how players use the platform — such as which pages are visited most frequently, how long sessions last, and where players navigate from and to. This data is used in aggregate and does not identify you personally.
• Security Cookies: These help us detect and prevent fraudulent logins, unusual access patterns, and bot activity on the krekaya platform.

3.3 Third-Party Technologies

The krekaya platform may incorporate components from third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — which may set their own cookies or use similar tracking technologies within their embedded game interfaces. These technologies are governed by the respective providers' own privacy policies. krekaya is not responsible for the data practices of third-party game providers, though we only partner with providers who operate to high standards of data protection.

4. Data Sharing & Disclosure

krekaya does not sell, lease, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only with parties who are contractually obligated to maintain the confidentiality and security of your information.

4.1 Payment Service Providers

To process deposits and withdrawals, krekaya shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. The data shared is limited to what is strictly necessary to complete the transaction (typically your registered mobile number or bank account details and the transaction amount in BDT). These providers are independently regulated financial institutions operating under their own data protection obligations.

4.2 Identity Verification Partners

For KYC verification purposes, krekaya may share copies of identity documents with trusted third-party identity verification service providers. These partners process your KYC data solely for the purpose of verification on krekaya's behalf and are contractually prohibited from using your data for any other purpose. Verification data is processed and stored securely in accordance with this Privacy Policy.

4.3 Game Technology Providers

Third-party game studios whose games are hosted on the krekaya platform — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — may receive anonymised session and wager data in connection with game round verification and fairness auditing. Personal identifiers such as your name or mobile number are not passed to game providers. Game round data is used for RNG certification and game integrity purposes only.

4.4 Legal and Regulatory Disclosure

krekaya may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, krekaya will disclose only the minimum data necessary to comply with the legal obligation and, where permitted by law, will notify the affected player of the disclosure request.

4.5 Business Transfers

In the event that krekaya undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. In such an event, krekaya will notify affected players by email at the address registered on their account and will ensure that the receiving entity is bound by terms no less protective than this Privacy Policy before any data transfer takes place.

5. Data Retention

krekaya retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable laws and regulations. The retention periods below are the standard minimum periods krekaya applies; certain data may be retained for longer periods where required by specific legal obligations.

5.1 Deletion After Retention Period

At the end of the applicable retention period, krekaya will securely delete or anonymise your personal data so that it can no longer be used to identify you. Where anonymisation is used rather than deletion, the anonymised data may be retained indefinitely for aggregate statistical and platform improvement purposes. Deletion requests submitted by players (under the right to erasure) are processed subject to the minimum retention periods required by law — krekaya cannot delete data that it is legally required to retain.

6. Your Privacy Rights

As a krekaya player, you have a number of rights in relation to the personal data that krekaya holds about you. These rights are described below. To exercise any of these rights, please contact our support team in English at [email protected]. krekaya will respond to all valid requests within 30 days of receipt.

6.1 Right of Access

You have the right to request a copy of the personal data that krekaya holds about you. We will provide this information in a structured, commonly used, and machine-readable format. Requests are processed free of charge for the first copy per 12-month period; a reasonable administrative fee may apply to subsequent requests within the same period.

6.2 Right to Rectification

If any of the personal data that krekaya holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For certain data fields (such as your email address or residential address), you may be able to update these directly in your account settings. For other data fields (such as your legal name or date of birth, which are verified during KYC), a formal rectification request supported by documentary evidence will be required.

6.3 Right to Erasure

In certain circumstances, you have the right to request that krekaya delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing only), or where the data has been unlawfully processed. This right is subject to our legal obligations — krekaya cannot erase data that must be retained under anti-money laundering, financial, or responsible gaming regulations. We will always explain clearly which data can and cannot be deleted and the reason why.

6.4 Right to Restrict Processing

You may request that krekaya restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or while a request for erasure is being considered. Where processing is restricted, krekaya will continue to store your data but will not actively use it for any purpose other than storage until the restriction is lifted.

6.5 Right to Data Portability

For data that you have provided to krekaya on the basis of consent or contractual necessity, you have the right to receive that data in a portable, machine-readable format and to transmit it to another service provider of your choice. This right applies to your registration data and transaction history. Please contact [email protected] to submit a portability request.

6.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on krekaya's legitimate interests. If you object, krekaya will cease that specific processing activity unless we can demonstrate compelling legitimate grounds for continuing which override your interests, rights, and freedoms. You may always object to the processing of your data for direct marketing purposes — this objection will be honoured unconditionally.

7. Data Security

krekaya takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. While no online platform can guarantee absolute security, krekaya continuously reviews and strengthens its security posture to maintain the highest practical standards.

7.1 Technical Security Measures

• All data in transit between your device and krekaya servers is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Passwords are stored as salted cryptographic hashes — they are never stored in plain text and krekaya staff cannot read your password.
• Two-factor authentication (2FA) is available to all registered players and strongly recommended, particularly for accounts with high transaction volumes.
• Access to krekaya's internal systems is controlled on a strict need-to-know basis. Staff access to player data is logged and audited regularly.
• The krekaya platform undergoes regular security assessments including penetration testing and vulnerability scanning.

7.2 Organisational Security Measures

• All krekaya staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.
• Third-party partners and service providers who process personal data on krekaya's behalf are required to maintain security standards consistent with this Privacy Policy, and are audited periodically.
• krekaya maintains a documented incident response plan to manage and contain any data security incidents promptly.

7.3 Your Role in Security

While krekaya protects data at the platform level, you are responsible for the security of your own device and your krekaya account credentials. krekaya strongly recommends that you use a unique, complex password for your krekaya account that you do not use on any other site; enable two-factor authentication; log out of your account after each session, especially on shared or public devices; and never share your krekaya password with any person — including individuals claiming to be krekaya staff, who will never ask for your password.

7.4 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, krekaya will notify affected players by email at the address registered on their account without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures krekaya has taken or proposes to take to address the breach and mitigate its effects.

8. Policy Updates & Contact

krekaya reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the Policy, we will notify registered players by email at the address on their account and by posting a prominent notice on the krekaya platform. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Continued use of the krekaya platform after the effective date of a revised Privacy Policy constitutes your acceptance of those changes.

8.1 Minor Updates

Non-material changes — such as corrections to typographical errors, clarification of existing policies without substantive change, or updates to contact details — may be made without individual notification. We encourage you to review this Privacy Policy periodically to stay informed about how krekaya protects your data.

8.2 Contact the Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that krekaya holds about you, please contact us in English using the details below. krekaya is committed to resolving all privacy-related enquiries promptly and fairly.

• Email: [email protected] — please use subject line "Privacy Enquiry"
• Live Chat: Available 24/7 directly on the krekaya platform
• WhatsApp: +880 1700-000000 (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and to resolve them within 30 calendar days.