Kikya Privacy Policy

01 Who We Are

Kikya is an online betting and casino platform operating at kikya.net, serving registered members in Bangladesh. When this Privacy Policy refers to "Kikya", "we", "us", or "our", it means the Kikya platform and the team responsible for operating it.

Kikya acts as the data controller for all personal data collected through the platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how Kikya handles your personal data, or if you want to exercise any of your data rights, you can contact our privacy team at any time by emailing [email protected]. We aim to respond to all privacy-related queries within 5 business days.

02 Data We Collect

Kikya collects personal data from you in three main ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification services.

Kikya does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where this is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

03 How We Use Your Data

Kikya uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your Kikya account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction Processing: To process deposits, withdrawals, and bonus credits to your account via bKash, Nagad, and Rocket.
• Legal Compliance: To comply with anti-money laundering (AML) regulations, age verification requirements, and other applicable legal obligations.
• Responsible Gaming: To monitor your betting activity for signs of problem gambling and to apply responsible gaming tools where appropriate.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and accurately.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the Kikya platform and user experience.
• Marketing Communications: To send you information about promotions, bonuses, and new games on Kikya, where you have opted in to receive such communications.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, and other prohibited conduct on the platform.

Kikya does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where this is required for fraud prevention or legal compliance purposes.

04 Legal Basis for Processing

Kikya processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Kikya service to you under the Terms and Conditions you agreed to at registration — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, AML checks, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out for Kikya's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

05 Data Sharing

Kikya shares your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, and Rocket receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers may receive copies of your identity documents to verify your age and identity. These providers are contractually bound to process your data only for verification purposes.
• Game Content Providers: Licensed game providers whose content appears on the Kikya platform may receive anonymised technical data necessary to deliver their games. They do not receive your personal identity or financial data.
• Regulatory Authorities: Kikya may be required to share data with regulatory bodies, law enforcement agencies, or courts where required by applicable law. Kikya will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Services: Anonymised or pseudonymised data may be shared with industry fraud prevention networks to protect the platform and its members from fraudulent activity.

06 Cookies & Tracking Technologies

Kikya uses cookies and similar tracking technologies on the kikya.net website and in the Kikya mobile application. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how you use the service.

Kikya uses the following types of cookies:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how members use the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used to improve the platform.
• Performance Cookies: Monitor platform performance and help identify technical issues that may affect your experience.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Kikya platform, but some features may not function as intended. Note that essential cookies cannot be disabled as they are required for the platform to operate securely.

07 Data Security

Kikya takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration.

• All data transmitted between your device and the Kikya platform is encrypted using TLS/SSL technology.
• Financial transaction data is processed through encrypted payment channels and is never stored in plain text.
• Passwords are stored using one-way cryptographic hashing and are never accessible in plain text, even to Kikya staff.
• Access to personal data within Kikya is restricted on a need-to-know basis and all access is logged.
• Kikya's systems are regularly tested for security vulnerabilities by internal and external security teams.
• In the event of a data breach that poses a risk to your rights, Kikya will notify affected members promptly and take immediate steps to contain the breach.

08 Data Retention

Kikya retains your personal data for as long as is necessary for the purposes described in this policy, or as required by applicable law. The following retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with anti-money laundering regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulations.
• Identity Verification Documents: Retained for the duration of your account and for 5 years after closure. Copies are securely deleted after this period.
• Support Communications: Retained for 2 years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing Preferences: Retained until you withdraw consent or request deletion. Opt-out records are retained indefinitely to ensure we do not contact you again.
• Technical and Usage Data: Anonymised after 12 months and retained in aggregate form for platform analytics purposes.

When personal data is no longer required, Kikya securely deletes or anonymises it. Secure deletion means the data is permanently removed from all active systems and backups within a reasonable timeframe following the end of the retention period.

09 Your Data Rights

As a Kikya member, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

Kikya will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply. Kikya may ask you to verify your identity before processing a data rights request to ensure your data is not disclosed to an unauthorised party.

10 Children's Privacy

The Kikya platform is strictly for adults aged 18 and over. Kikya does not knowingly collect personal data from individuals under the age of 18. Age verification is carried out during the registration process and may be repeated at any time during the account lifecycle.

If Kikya becomes aware that personal data has been collected from a person under the age of 18, the account will be immediately closed, all data will be securely deleted, and any deposits will be returned to the originating payment account. If you believe a minor has registered on the Kikya platform, please contact us immediately at [email protected].

11 Changes to This Privacy Policy

Kikya may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered members via email or an on-platform notification before the changes take effect.

The updated policy will always be available on this page at kikya.net/privacy-policy, with the effective date clearly shown at the top. We recommend reviewing this page periodically. Your continued use of the Kikya platform after any update constitutes acceptance of the revised Privacy Policy.

If you disagree with any changes to this policy, you may request account closure by contacting [email protected]. Your data will be handled in accordance with the version of the policy in effect at the time of your request until the closure is processed.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Kikya handles your personal data, please get in touch with our privacy team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the Kikya platform
• FAQ: Visit our FAQ page for answers to common privacy questions

All privacy-related requests are handled by our dedicated support team. We aim to acknowledge your request within 2 business days and provide a full response within 30 days. For urgent matters relating to suspected unauthorised access to your account, please use live chat for the fastest response.