kirkya Privacy Policy

kirkya processes your personal data only where a lawful basis exists for doing so. The primary bases on which we rely are: (a) the performance of a contract with you — specifically, operating your gaming account; (b) compliance with a legal obligation — such as anti-money-laundering regulations; and (c) our legitimate interests — such as fraud prevention and platform security, provided those interests are not overridden by your rights. In certain cases, such as direct marketing communications, we may also rely on your consent.

We use your data for the following specific purposes:

• Registering and managing your kirkya account.
• Processing deposits and withdrawals in BDT via your chosen payment method.
• Verifying your age (21+) and identity in accordance with applicable requirements.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, and other illegal activity.
• Providing customer support and resolving disputes.
• Sending you service-related communications, such as account confirmation emails, security alerts, and support responses.
• Administering bonuses, promotions, and loyalty programmes where applicable.
• Monitoring your gaming activity for responsible gaming purposes, including identifying signs of problem gambling.
• Improving the kirkya platform through analysis of aggregated, anonymised usage data.

kirkya uses cookies and similar tracking technologies to operate the platform, personalise your experience, and maintain session security. Cookies are small text files stored on your device when you visit kirkya.onl. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for core platform functionality, including session management and login authentication. These cannot be disabled without affecting platform operation.
• Analytical Cookies: Allow us to count visits, identify traffic sources, and understand how players interact with the platform. All data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences, such as language settings and game history, to improve your experience on return visits.
• Security Cookies: Help detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform. kirkya does not use cookies to serve third-party advertising.

kirkya does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data security standards.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their games. No personally identifiable information is shared beyond what is required for game delivery.
• Fraud & Security Services: Specialist third-party services may receive technical data (IP addresses, device fingerprints) to assist in detecting and preventing fraudulent activity.
• Legal Authorities: kirkya may disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
• Professional Advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations may access your data where necessary in connection with their professional services to kirkya.

Any third party that processes data on kirkya's behalf is required to handle that data in accordance with applicable data protection principles and is prohibited from using it for any purpose beyond the specific service they provide.

kirkya implements a layered approach to data security, combining technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Bcrypt hashing for stored passwords — we never store passwords in plain text.
• Firewalls, intrusion detection systems, and regular security audits of our platform infrastructure.
• Strict internal access controls — kirkya staff access personal data only on a need-to-know basis and are subject to confidentiality obligations.
• Regular vulnerability assessments and penetration testing conducted by independent security professionals.

While kirkya takes reasonable and proportionate steps to secure your data, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kirkya will notify affected players without undue delay using the contact details registered on your account.

kirkya retains your personal data for as long as your account remains active and for a minimum period thereafter as required by applicable law and our internal retention schedule. The following general retention periods apply:

• Active Account Data: Retained throughout the lifetime of your account.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for anti-money-laundering compliance.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of account closure.
• Support Correspondence: Retained for three (3) years from the date of last contact.
• Technical & Usage Logs: Retained for up to twelve (12) months, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

Subject to applicable law, you have the following rights in relation to your personal data held by kirkya. To exercise any of these rights, please submit a written request to [email protected]. We will respond within a reasonable timeframe, generally within 30 days of receiving your request.

• Right of Access: You may request a copy of the personal data kirkya holds about you.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where kirkya no longer has a legitimate reason to retain it, subject to our legal obligations.
• Right to Restrict Processing: You may ask us to suspend certain processing activities while a complaint or rectification request is under review.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that some requests — particularly erasure requests — may not be fulfilled in full where kirkya is required to retain certain data to comply with its legal obligations, for example anti-money-laundering requirements.

kirkya's services are strictly intended for individuals who are 21 years of age or older. kirkya does not knowingly collect personal data from anyone below this age. If you believe that a person under 21 has provided personal data to kirkya, or has registered an account on the platform, please notify us immediately at [email protected]. Upon confirmation, kirkya will delete the relevant account and associated data without undue delay. 21+

kirkya.onl may contain links to third-party websites or services — for example, the websites of payment partners such as bKash or Nagad. This Privacy Policy applies solely to kirkya.onl. kirkya has no control over, and accepts no responsibility for, the privacy practices of any third-party website. We encourage you to read the privacy policy of any external site you visit via a link from kirkya.onl.

kirkya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, or applicable legal requirements. When material changes are made, we will update the "Effective Date" at the top of this page and, where appropriate, notify registered players by email at the address associated with their account.

Your continued use of kirkya following the publication of a revised Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to stay informed of how your data is protected.

If you have any questions, concerns, or complaints about this Privacy Policy or the way kirkya handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 9:00 AM – 11:00 PM BST (UTC+6), seven days a week

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 14 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.