Privacy Policy — How kikya11 Protects Your Personal Data

1 Information We Collect

kikya11 collects personal data in several ways: information you provide directly during registration and account management, information generated automatically through your use of the platform, and information received from approved third-party partners such as payment processors and identity verification providers.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, phone number, and a chosen password when you create your kikya11 account.
• Identity verification (KYC) documents: Copies of government-issued photo identification such as a National Identity Card (NID), passport, or driving licence; and proof of address documents where required.
• Payment information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) as entered during deposit or withdrawal requests. Full card numbers are not stored by kikya11 — payment processing is handled by PCI-DSS-compliant payment partners.
• Support communications: Any messages, emails, chat transcripts, or attachments you send to the kikya11 support team at [email protected].
• Responsible gaming preferences: Deposit limits, session reminders, cooling-off requests, and self-exclusion elections recorded through your account settings.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed, session duration, click-stream data, and feature interactions within the kikya11 platform.
• Location data: Approximate geographic location derived from your IP address. kikya11 does not collect GPS-level precise location data.
• Cookies and tracking data: As described in Section 3 of this Policy.

2 How We Use Your Data

kikya11 processes your personal data only for legitimate purposes that are directly connected to the delivery and improvement of our services. The following table summarises the primary purposes for which your data is used and the legal basis for each processing activity.

Marketing emails from kikya11 are sent only to players who have explicitly opted in to receive them. You may withdraw your marketing consent at any time by following the unsubscribe link in any promotional email or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and will not prevent kikya11 from sending transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts).

3 Cookies & Tracking Technologies

The kikya11 platform uses cookies and similar technologies such as web beacons and local storage to provide a functional, personalised, and secure user experience. A cookie is a small text file placed on your device when you visit a website. It is not a program and cannot execute code or deliver viruses.

kikya11 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your authenticated session after a kikya11 Login, remember your language and regional settings, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred game lobby view, last-visited game category, and notification settings — so that you do not need to re-configure them on every visit.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how players navigate the kikya11 platform — which pages are most visited, how long sessions last, and where players encounter errors. This data helps us improve the platform experience. Individual players are not identified by these cookies.
• Security Cookies: These cookies support our fraud detection systems by helping us identify unusual patterns of access that may indicate account takeover attempts, bot activity, or suspicious betting behaviour.

Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for a defined period, typically between 30 days and 12 months depending on their function, unless you delete them earlier via your browser settings.

4 Data Sharing & Third Parties

kikya11 does not sell or commercially transfer your personal data to third parties. We share personal data with external parties only in the following specific and necessary circumstances:

• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant transaction data is shared with the applicable payment service provider to facilitate the transaction. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.
• Identity verification partners: KYC and document verification may be processed by a third-party identity verification service. This service receives only the specific documents and data required to complete verification and is contractually prohibited from using that data for any other purpose.
• Game software providers: The games available on kikya11 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay data for the purpose of game operation, performance monitoring, and fair-play auditing. They do not receive your name, payment details, or contact information.
• Analytics service providers: Aggregated, anonymised platform performance data may be shared with analytics tools to help us understand usage patterns and improve the kikya11 experience. This data does not identify individual players.
• Legal and regulatory authorities: kikya11 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or formal regulatory request. Where legally permitted, we will notify affected players of such disclosures.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of the kikya11 business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller in advance.

All third-party service providers with whom kikya11 shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes specified in their respective agreements with kikya11.

5 Data Security & Storage

kikya11 implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the kikya11 platform.
• Encryption of sensitive data at rest within our database systems, including password hashes using industry-standard one-way hashing algorithms (passwords are never stored in plain text).
• Role-based access controls ensuring that only authorised personnel whose job function requires access to personal data are permitted to view or process it.
• Regular security assessments and vulnerability testing of the kikya11 platform infrastructure.
• Formal incident response procedures to detect, contain, and respond to potential data security breaches in a timely manner.
• Staff training on data protection obligations and the handling of personal information in accordance with this Policy.

While kikya11 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage method is 100% secure. You also play an important role in protecting your account: use a strong, unique password for your kikya11 account, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect that your account has been compromised.

Personal data collected by kikya11 is stored on secure servers. Data may be processed in jurisdictions outside Bangladesh where our technology infrastructure or third-party service providers are based. In such cases, kikya11 ensures that appropriate data transfer safeguards are in place consistent with applicable data protection standards.

6 Your Data Rights

As a kikya11 player, you have rights in relation to the personal data we hold about you. kikya11 respects these rights and provides a straightforward process for exercising them. The following rights apply to your personal data:

• Right of Access: You may request a copy of the personal data that kikya11 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many account details directly from your account settings after a kikya11 Login.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where we are required to retain data for legal, regulatory, fraud prevention, or responsible gaming purposes. Where a full erasure request cannot be fulfilled in its entirety, we will explain which data must be retained and why.
• Right to Restriction: You may ask us to restrict processing of your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you may request that we provide your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interest, including profiling for responsible gaming purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, submit a written request to [email protected] from your registered email address, clearly describing the right you wish to exercise and the specific data concerned. We will verify your identity before processing your request and will respond within 30 days. If your request is complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly.

7 Data Retention Policy

kikya11 does not retain personal data for longer than is necessary for the purposes for which it was collected. The following retention schedule applies to the main categories of personal data we hold:

• Account registration and profile data: Retained for the duration of your active account and for a period of 5 years following permanent account closure, in order to satisfy anti-money laundering record-keeping obligations and to resolve any disputes that may arise after closure.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission, in compliance with applicable financial crime prevention regulations. Where a regulatory authority requires an extended retention period, we will comply with that requirement.
• Transaction and payment records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Responsible gaming records: Deposit limits, self-exclusion records, session time data, and related responsible gaming account history are retained for a minimum of 5 years to support duty-of-care obligations and to prevent circumvention of self-exclusion arrangements.
• Customer support communications: Retained for a period of 3 years from the date of the most recent communication in a support thread, unless the communication relates to an ongoing dispute, in which case records are retained until the dispute is fully resolved plus 1 year.
• Marketing preference records: Retained for the duration of your account and for 2 years following account closure or withdrawal of marketing consent, as evidence of the consent status applicable during any period of marketing communication.
• Server log and technical data: Retained for up to 12 months for security monitoring and fraud investigation purposes, after which it is anonymised or deleted.

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. kikya11 reviews its data retention schedules periodically and updates them as required to remain consistent with legal and regulatory developments.

8 Contact & Complaints

If you have any questions about this Privacy Policy, the way in which kikya11 processes your personal data, or you wish to exercise any of your data rights, please contact us at:

Email: [email protected]
Language: English
Response time: Within 5 business days for general privacy queries; within 30 days for formal data rights requests.

Please include your full registered name and the email address associated with your kikya11 account in any privacy-related communication so that we can verify your identity and locate your records efficiently.

If you are not satisfied with our response to a privacy concern or data rights request, you have the right to escalate the matter. We encourage you to contact us first so that we have the opportunity to address your concern directly before any escalation.

kikya11 is committed to resolving all privacy concerns fairly and promptly. We review this Privacy Policy at least annually and update it whenever there is a material change to our data processing practices, applicable law, or the services we offer. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the kikya11 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

This Privacy Policy was last reviewed and updated in January 2026. © 2026 kikya11. All rights reserved. For the avoidance of doubt, this Policy forms part of the kikya11 Terms & Conditions and should be read in conjunction with them.