kerkiya Privacy Policy

Who Operates kerkiya

kerkiya operates the website kerkiya.ws and the kerkiya mobile app, providing online casino games, sports betting, and related services to players in Bangladesh. This Privacy Policy explains what personal information kerkiya collects, why we collect it, and the choices you have.

When you create an account, place a bet, or contact our support team, you are sharing data directly with kerkiya. We are the data controller for all player information gathered through our platform. Any questions about this policy can be directed to [email protected].

Information We Collect

kerkiya collects only the information needed to provide a safe, fair, and functional platform. We gather data in three ways: directly from you, automatically as you use the site, and from third-party verification services.

Information you give us

• Full name, date of birth, and nationality (required at registration)
• Mobile number and email address
• Identity documents for KYC verification: National ID Card (NID), Passport, or Driving Licence
• Payment method details — your bKash, Nagad, Rocket, Upay wallet numbers or bank account information
• Messages sent to our support team via Live Chat or email

Information collected automatically

• Device type, operating system (Android version for app users), and browser type
• IP address and approximate location (country and city level)
• Pages visited, games played, bet amounts, session duration, and click patterns
• Cookies and local storage identifiers (see the Cookies section below)

Information from third parties

• Identity verification results from our KYC service provider
• Payment confirmation data from bKash, Nagad, Rocket, Upay, and bank partners
• Fraud and risk signals from our security partners

What We Do With Your Data

kerkiya uses your information to run a working, honest platform. We do not sell your data to third parties and we do not use it for purposes unrelated to gaming and account management.

Legal Grounds for Processing

kerkiya processes personal data under the following legal bases:

• Contract performance — processing your registration, bets, deposits, and withdrawals is necessary to deliver the service you signed up for.
• Legal obligation — KYC verification and anti-money-laundering checks are required by applicable regulations. We must verify your identity before processing your first withdrawal.
• Legitimate interests — fraud detection, platform security, and service analytics are carried out as legitimate business interests, balanced against your privacy rights.
• Consent — marketing emails and push notifications are only sent when you have opted in. You can withdraw consent at any time through your account settings or by emailing [email protected].

When We Share Information

kerkiya does not sell, rent, or trade your personal data. We share it only when necessary, with the following categories of recipients:

• Payment processors — bKash, Nagad, Rocket, Upay, and bank partners receive only the account and transaction data needed to complete your request.
• KYC and identity verification providers — your ID documents are shared with our verification partner to confirm your identity. This provider is contractually bound to handle your data securely.
• Game providers — Red Tiger, CQ9, Pragmatic Play, Ezugi, and PG Soft may receive a session token to load games. They do not receive your name, payment details, or ID.
• Security and fraud services — anonymised device signals are shared with our fraud detection partner to protect all users.
• Legal authorities — kerkiya will disclose data to law enforcement or regulators when legally required. We will not do so beyond what the law compels.

How Long We Keep Records

kerkiya retains personal data for as long as your account is active, plus an additional period required by our compliance obligations. The table below gives specific timelines.

When retention periods expire, data is securely deleted or irreversibly anonymised.

Your Rights as a Player

You have specific rights over the personal data kerkiya holds about you. To exercise any of the rights below, email [email protected] with the subject line "Data Request" and your registered mobile number. We will respond within 30 days.

• Access — request a copy of the personal data kerkiya holds on your account.
• Correction — ask us to fix inaccurate or outdated information (name spelling, contact number, etc.).
• Deletion — request erasure of data we are not legally required to keep. Note: KYC and transaction data must be retained for the periods shown above.
• Restriction — ask us to pause processing while a dispute is under review.
• Portability — receive your registration and transaction data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — opt out of marketing communications at any time without affecting your account status.

Cookies and Tracking

kerkiya uses cookies and similar technologies to keep you logged in, remember your preferences, and measure how the platform is used. No third-party advertising cookies are placed on kerkiya.ws.

Strictly necessary cookies

These run your session, authenticate your login, and protect against cross-site request forgery. You cannot opt out of these while using the site — they are essential for security.

Functional cookies

These remember your language preference, last-visited game, and display settings. They are set when you log in and expire when your session ends or after 30 days of inactivity.

Analytics cookies

Aggregated, anonymised data about page views and game interactions helps us improve kerkiya. You can opt out of analytics tracking in your account preferences. Opting out does not affect your ability to play or withdraw.

Keeping Your Data Secure

kerkiya uses industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

• All data in transit is encrypted using TLS 1.2 or higher. The padlock in your browser confirms this on every page of kerkiya.ws.
• Passwords are stored as salted hashes — kerkiya staff cannot read your password.
• Access to player data within our systems is restricted to staff who need it for their job, and all access is logged.
• Payment details are handled through PCI-DSS compliant gateways. kerkiya does not store full card or mobile wallet credentials on our servers.
• The kerkiya app (Android 8.0 and above) uses encrypted local storage for session tokens.

No system is completely immune to breaches. If a data incident affects your account, kerkiya will notify you at your registered email address and explain what happened and what steps we are taking.

Players Under 18

kerkiya is strictly an 18+ platform. We do not knowingly collect or store personal data from anyone under the age of 18. Age verification is part of the KYC process — if we find that a user is underage, the account will be closed immediately and any funds returned.

If you believe a minor has registered on kerkiya, contact us at [email protected] and we will investigate without delay.

Updates to This Policy

kerkiya may update this Privacy Policy from time to time — for example, to reflect changes in payment methods, new game providers, or updated regulations. When changes are significant, we will notify you by email or through a banner on kerkiya.ws at least 14 days before the new policy takes effect.

Continuing to use kerkiya after a policy update takes effect means you accept the revised terms. If you do not agree, you may request account closure by contacting support before the effective date.

Reach Our Privacy Team

For any question, complaint, or request relating to this Privacy Policy or the data kerkiya holds about you, get in touch directly: