kikya Privacy Policy
Your privacy matters to us. This Policy explains what personal data kikya collects, why we collect it, how we use it, and the rights you hold over your information as a player on kikya.vip.
All data in transit is protected by industry-standard SSL encryption.
kikya never sells your personal data to third-party marketing companies.
Marketing emails are only sent with your explicit consent and can be withdrawn anytime.
You may access, correct, or request deletion of your personal data at any time.
We collect only the data strictly necessary to operate your account and comply with regulations.
Questions about your data? Reach our support team at [email protected].
Introduction and Scope
This Privacy Policy ("Policy") is issued by kikya ("kikya", "we", "us", "our") and applies to all personal data processed in connection with your use of kikya.vip and any associated services, mobile interfaces, or communications (collectively, the "Platform"). This Policy forms part of our Terms & Conditions and should be read alongside them. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
kikya is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy covers our data practices for players based in Bangladesh and applies to all registration, deposit, gameplay, withdrawal, and support interactions on the Platform.
Personal Data We Collect
kikya collects personal data through several channels: data you provide directly when registering or using the Platform, data generated automatically during your use of the Platform, and data received from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect include:
Full name, date of birth, national ID or passport number, and profile photo where submitted for KYC.
BDT wallet numbers (bKash, Nagad, Rocket, Upay), transaction history, deposit and withdrawal amounts.
Email address, mobile phone number, and communication preferences as provided at registration.
Bet history, game session logs, wagering activity, bonus usage, and win/loss records.
IP address, device type, operating system, browser type, screen resolution, and general location derived from IP.
Session cookies, preference cookies, and analytical cookies tracking page visits, click paths, and feature usage.
We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless such data is incidentally contained within KYC documents submitted by you. Where such incidental data is received, it is not processed for any purpose other than identity verification and is not retained beyond what is necessary for that purpose.
How We Use Your Personal Data
kikya processes your personal data for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The purposes for which we use your data include:
- Account creation, maintenance, and authentication — processing registration data to create and secure your kikya account, including password management and session handling.
- Identity verification and KYC compliance — collecting and verifying identity documents to confirm your age (21+), prevent fraud, and meet anti-money laundering obligations applicable to the Platform.
- Payment processing and financial administration — managing BDT deposits, withdrawals, and transaction records through bKash, Nagad, Rocket, Upay, and other supported payment channels.
- Providing gaming and betting services — operating game sessions, calculating outcomes, recording bet history, applying bonuses, and settling sports betting markets including cricket, football, and other events.
- Customer support and dispute resolution — using account data and session logs to investigate support tickets, resolve disputes, and respond to your queries via [email protected].
- Responsible gaming monitoring — analysing gaming activity patterns to identify signs of problem gambling, enforcing account limits, processing self-exclusion requests, and ensuring compliance with our responsible gaming obligations.
kikya will not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human review. Where profiling is used for responsible gaming purposes, a human review is available on request by contacting [email protected].
Legal Basis for Processing
kikya processes personal data only where a valid legal basis exists. The legal bases on which we rely are:
- Contractual necessity: Processing required to perform the contract between you and kikya — including account management, payment processing, and delivery of gaming services.
- Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC identity verification, anti-money laundering checks, and age verification obligations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
- Consent: Processing for direct marketing communications and optional analytics features, where you have given your explicit and freely withdrawable consent at the time of registration or subsequently through account settings.
KYC and Identity Verification
kikya is required to verify the identity of all account holders before permitting withdrawals and in other circumstances where verification is necessary. KYC verification requires you to submit government-issued identity documents such as a National ID Card (NID), passport, or driving licence, together with a selfie or live photo where requested. You may also be asked to provide proof of address and proof of payment method ownership.
KYC documents are processed solely for the purpose of identity verification and fraud prevention. They are stored in an encrypted format and are not used for any other purpose. We may share KYC documents with regulated identity verification service providers acting as our data processors under strict contractual obligations. KYC documents are retained for the period required by applicable legal retention obligations, typically five years from account closure.
Sharing Your Personal Data
kikya does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances, and only to the extent necessary for each specific purpose:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other BDT payment partners receive transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and applicable financial regulations.
- Game and platform providers: Technology providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive session and account identifiers necessary to deliver game content and settle game results. These providers do not receive your full KYC data or financial account details.
- Identity verification services: Regulated KYC and AML service providers who process identity documents on our behalf under strict data processing agreements, limited to the minimum data necessary for verification.
- Legal and regulatory authorities: Where we are required by law, court order, or lawful regulatory request to disclose account or transaction data to law enforcement or regulatory bodies. We will notify you of such disclosure where legally permitted to do so.
All third parties with whom we share your data are required to respect the security of your personal data and treat it in accordance with applicable data protection law. We do not allow third-party service providers to use your personal data for their own purposes beyond the defined scope of their engagement with kikya.
Cookies and Tracking Technologies
kikya uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your logged-in session, and gather anonymous analytics about how the Platform is used. The categories of cookies we use are:
- Strictly necessary cookies: These are essential for the Platform to function. They enable login session persistence, security token validation, and basic navigation. These cannot be disabled without rendering the Platform non-functional.
- Preference and functional cookies: These store your language preferences, display settings, and other user-configurable options so that the Platform behaves consistently across sessions.
- Analytics cookies: Anonymous data about page visits, session duration, navigation paths, and feature engagement, used to improve the Platform. Analytics data is aggregated and cannot be used to identify you individually.
You may manage your cookie preferences through your browser settings. Please note that disabling cookies other than strictly necessary ones may affect your Platform experience, including the ability to remain logged in and access personalised features. kikya does not use cookies for cross-site advertising tracking or sell cookie data to advertising networks.
Data Security
kikya implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect the personal data of our players. Security measures in place include:
- SSL/TLS encryption for all data transmitted between your device and kikya.vip, preventing interception during transit.
- Encryption at rest for sensitive data including identity documents, financial records, and authentication credentials stored on our servers.
- Access controls ensuring that only authorised personnel whose roles require access to personal data can view or process that data, with audit logging for all access events.
- Regular security assessments and vulnerability testing of the Platform infrastructure, with prompt remediation of identified issues.
Despite these measures, no data transmission or storage system can be guaranteed to be completely secure. If you suspect that your account has been compromised, contact [email protected] immediately. In the event of a data security incident that affects your rights or interests, kikya will notify affected users without undue delay where required to do so.
Data Retention
kikya retains your personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable legal obligations. Retention periods for the principal categories of data are as follows: active account data is retained for the duration of your account; KYC and identity verification documents are retained for a minimum of five years from account closure; financial transaction records are retained for a minimum of five years as required by applicable financial regulations; gaming session logs are retained for two years from the date of the session; customer support correspondence is retained for three years from the date of the interaction.
Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data is anonymised, the anonymised data may be retained for longer periods for legitimate statistical and analytical purposes.
Your Privacy Rights
As a user of the kikya Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days:
-
Right of Access You may request a copy of all personal data we hold about you, including account details, transaction history, KYC status, and gaming records.
-
Right of Rectification You may request correction of inaccurate or incomplete personal data. Some corrections (e.g. name changes) require supporting documentation for verification purposes.
-
Right of Erasure You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Erasure cannot be applied to data we are legally required to retain.
-
Right to Restrict Processing You may request that we limit how we use your data in certain circumstances, such as where you contest its accuracy or object to our legitimate interests basis, pending resolution of that objection.
-
Right to Data Portability You may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract, to allow transfer to another service if desired.
-
Right to Withdraw Consent Where processing is based on consent (e.g. marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Children's Privacy
The kikya Platform is strictly for adults aged 21 years and above. kikya does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use the Platform, and you must not submit any personal data to us.
If kikya discovers or is notified that an account belongs to a person under the age of 21, we will immediately suspend that account, delete the associated personal data, and return any real-money balance via the registered payment method pending identity confirmation. Parents or guardians who believe a minor may have registered an account on kikya.vip should contact [email protected] immediately.
Marketing Communications
kikya may send you promotional emails, bonus notifications, and platform updates where you have given explicit consent at registration or through your account settings. All marketing communications from kikya will identify kikya as the sender and will include a clearly visible unsubscribe mechanism. Unsubscribe requests are processed within 72 hours of receipt.
Unsubscribing from marketing communications does not affect service-related communications such as transaction confirmations, security alerts, KYC requests, or responsible gaming notifications — these are sent on the basis of contractual necessity or legal obligation and cannot be opted out of while your account remains active.
Changes to This Privacy Policy
kikya may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features of the Platform. When we make material changes — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will update the "Last updated" date at the top of this page and, where practicable, notify registered account holders by email.
Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised Policy. We recommend bookmarking kikya.vip/privacy-policy and reviewing it periodically. If you have any concerns about a change to this Policy, contact us at [email protected] before continuing to use the Platform.
Contact and Data Protection Enquiries
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how kikya handles your personal data, please contact our support team. We take all privacy enquiries seriously and aim to respond within 30 days.
Data Protection Contact: [email protected]
When submitting a privacy enquiry, please include your registered account email address and a brief description of your request in the subject line to help us route and resolve your query efficiently. All privacy correspondence is treated as confidential.
Have Questions About Your Data?
Browse our FAQ for quick answers, or review our Terms & Conditions to understand the full scope of your rights and obligations as a kikya player.
Read Our FAQ Terms & Conditions