Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how kikiya ("kikiya", "we", "us", "our") collects, uses, stores, shares, and protects personal data obtained from players and visitors ("you", "your") who access the kikiya platform at kikiya.im and use any of its associated services, games, or features (collectively, the "Services").

This Policy applies to all personal data collected through our website, mobile-optimised platform, customer support channels, and any other interactions you have with kikiya. It should be read together with our Terms & Conditions, which govern your overall use of the platform.

By registering an account or using our Services, you confirm that you have read this Policy and consent to the processing of your personal data as described. If you do not agree with any aspect of this Policy, you should not use our Services.

2. Data Controller

kikiya is the data controller responsible for your personal data. For all data protection-related queries, you may contact us at:

Email: [email protected] (plain text — not a clickable link)

We aim to respond to all data-related enquiries within 5 business days in Bangladesh Standard Time (BST, UTC+6).

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a kikiya account, we collect the following information:

• Full name as it appears on your government-issued identification
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Username and encrypted password
• National Identity Card (NID) number, where required for verification

3.2 Identity Verification Documents

To comply with responsible gaming requirements and to process withdrawals, we may request copies of:

• National Identity Card (NID)
• Passport or driving licence
• Proof of address (utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account)

3.3 Transaction and Payment Data

We record all deposits and withdrawals made on your account, including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. We do not store payment wallet PINs or full bank account credentials.

3.4 Technical and Usage Data

When you use kikiya, we automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, games played, session duration, and click patterns
• Login timestamps and session activity logs
• Cookies and similar tracking technologies (see Section 9)

3.5 Customer Support Communications

If you contact our support team by email or any other channel, we retain records of that correspondence, including the content of your messages and any attachments, for the purpose of resolving your query and maintaining a support history.

4. How We Use Your Personal Data

kikiya processes your personal data for the following purposes:

5. Legal Basis for Processing

kikiya processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing necessary to comply with applicable laws, including identity verification, anti-fraud, and record-keeping requirements.
• Legitimate interests: Processing carried out for the legitimate interests of kikiya, such as platform security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as receiving promotional emails or push notifications. You may withdraw consent at any time by contacting [email protected].

6. Sharing Your Personal Data

6.1 Service Providers

kikiya may share your personal data with trusted third-party service providers who assist in operating our platform. These include payment processors (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), identity verification services, fraud detection providers, and cloud infrastructure partners. All service providers are contractually required to process your data only for the purpose it was shared and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosures

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of kikiya, our players, or third parties.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to data handling that result from it.

6.4 No Third-Party Marketing

kikiya does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing or advertising purposes. Your data is yours — we use it only to serve you better on the kikiya platform.

7. Data Retention

kikiya retains your personal data for as long as your account remains active and for a reasonable period thereafter to meet legal, audit, or dispute resolution obligations. Specific retention periods include:

• Account and registration data: Retained for the duration of your account plus a post-closure period as required by applicable law.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping obligations.
• Identity verification documents: Retained for the duration of your account plus the legally required post-closure period.
• Customer support records: Retained for a maximum of 3 years following the closure of a support case.
• Technical and usage logs: Retained for up to 12 months unless required for longer for security investigations.

Once the applicable retention period expires, your data is securely deleted or irreversibly anonymised so that it can no longer be linked back to you.

8. Your Data Rights

Depending on your circumstances, you may have the following rights regarding your personal data held by kikiya:

• Right of access: You may request a copy of the personal data kikiya holds about you.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances.
• Right to data portability: You may request that we provide your data in a commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests, or to receiving direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 5 business days in BST.

9. Cookies and Tracking Technologies

9.1 What Cookies We Use

kikiya uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the platform. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during your visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which pages are most visited, and how games are used. This data is used to improve the kikiya experience.
• Preference cookies: Used to remember your settings and preferences, such as your preferred language or last-visited game category.
• Security cookies: Used to detect and prevent fraudulent logins and other suspicious activity.

9.2 Managing Cookies

You can control non-essential cookies through your browser or device settings. Please note that disabling essential cookies will impair your ability to use kikiya, as they are required for account authentication and core platform functionality. kikiya does not use third-party advertising cookies or track you across other websites.

10. Data Security

kikiya implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data fields (including passwords) at rest using industry-standard algorithms
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Regular security assessments and monitoring of our systems and infrastructure
• Incident response procedures to detect, contain, and notify affected parties of any data breach

While we take every reasonable precaution, no system can be guaranteed to be 100% secure. You play an important role in keeping your account safe — please use a strong, unique password and never share your credentials with anyone.

11. Children and Minors

kikiya does not knowingly collect personal data from individuals under the age of 21. Our platform is strictly intended for adults aged 21 and above. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on kikiya, please contact us at [email protected] without delay.

12. Changes to This Privacy Policy

kikiya reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that affect how we use your personal data, we will make reasonable efforts to notify you directly — for example, by displaying a notice on the platform or sending you a message at your registered contact details.

Your continued use of kikiya after any update to this Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kikiya handles your personal data, please reach out to our support team:

Email: [email protected]

Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)

For queries specifically about responsible gaming, including self-exclusion and deposit limits, please visit our Responsible Gaming page.