krikta Privacy Policy — How We Collect, Use, and Protect Your Personal Data on Bangladesh's Premier Casino Platform
Your privacy matters to krikta. This Privacy Policy explains in plain English exactly what personal data we collect from Bangladesh players, why we collect it, how we use and store it, who we may share it with, and what rights you hold over your own information. We are committed to handling your data with transparency and care.
About This Policy: This Privacy Policy applies to all personal data collected by krikta through the website at https://krikta.com, all account management interfaces, customer support channels, and any associated mobile browser experience. By registering a krikta account, you confirm that you have read and understood this policy. If you do not agree with how we process personal data, you should not register or continue using the krikta Platform.
Section 1
Data Controller Identity
For the purposes of this Privacy Policy, krikta is the data controller responsible for the personal data of all registered players and site visitors in Bangladesh. As data controller, krikta determines the purposes for which personal data is collected and the means by which it is processed. All data processing activities described in this policy are carried out by krikta or by carefully selected third-party processors acting on krikta's documented instructions.
If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the krikta Data Protection team directly. All privacy-related enquiries are handled in English within two (2) Bangladesh business days:
Data Protection Contact:
krikta Privacy Team
Email: [email protected] — subject line: "Privacy Enquiry"
Response time: within 2 Bangladesh business days
Support hours: 24/7 in English (Bangladesh Standard Time, UTC+6)
krikta processes personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, integrity and confidentiality. We collect only the data we need, use it only for the purposes stated in this policy, and retain it only for as long as is necessary or required by applicable regulations.
Section 2
Information We Collect
krikta collects personal data from players and site visitors through several channels: directly when you provide it during registration or account management, automatically as you use the krikta Platform, and in limited cases from trusted third-party sources such as payment processors. The categories of personal data we collect are set out below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Full name, mobile number, date of birth, preferred username | Provided directly at account registration |
| Identity Verification Data | National ID (NID) copy, passport, utility bill, selfie with ID document | Uploaded via account dashboard or emailed to support on request |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, transaction reference numbers, deposit and withdrawal history | Provided during deposit / withdrawal; auto-recorded by payment processor integration |
| Technical & Device Data | IP address, browser type and version, operating system, device model, screen resolution, time zone | Collected automatically on each Platform session via server logs and analytics |
| Usage & Behavioural Data | Pages visited, games played, bets placed, session duration, click paths, search queries within the Platform | Collected automatically via cookies, pixel tags, and server-side analytics |
| Communications Data | Content of support chat transcripts, emails, SMS messages exchanged with the krikta support team | Collected when you contact krikta support via any channel |
| Marketing Preferences | Opted-in or opted-out status for SMS promotions, email newsletters, in-Platform notifications | Set by you in account notification settings; updated at any time |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, cooling-off period activation dates | Recorded when you configure responsible gaming tools in your account dashboard |
krikta does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data unless you voluntarily provide such information in the course of a support interaction. In all cases we treat any sensitive data disclosed to us with the highest level of confidentiality and use it solely to assist you with the matter at hand.
Mandatory vs Optional Data: Registration data (name, mobile number, date of birth) is mandatory to create and operate a krikta account. Identity verification data is mandatory before krikta processes any withdrawal above ৳50,000 or at any time krikta has a regulatory obligation to verify identity. All other data categories are either collected automatically as a technical necessity or provided voluntarily by you.
Section 3
Legal Basis for Processing
Every data processing activity carried out by krikta is grounded in one or more of the following lawful bases. krikta does not process personal data arbitrarily — each processing activity maps to a specific purpose and a specific legal justification as described below.
- Contractual necessity: Processing your registration data, financial transaction data, and account activity data is necessary for krikta to perform the contract we have with you as a registered Player — including operating your account, processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and delivering the betting and gaming services you have requested.
- Legal obligation: Processing your identity verification documents and financial transaction records is necessary for krikta to comply with applicable anti-money laundering (AML) requirements, know-your-customer (KYC) standards, and record-keeping obligations. krikta is required to retain these records for a minimum period regardless of whether your account remains active.
- Legitimate interests: Processing your technical data (IP address, device information, login times) and behavioural data (session patterns, game history) is carried out on the basis of krikta's legitimate interest in maintaining Platform security, detecting fraud, preventing bonus abuse, and ensuring a fair gaming environment for all Bangladesh players. This processing does not override your fundamental privacy rights.
- Consent: Processing your data for direct marketing purposes — including promotional SMS messages, email newsletters about krikta bonuses, and BPL / IPL seasonal offers — is carried out only where you have given your freely, specific, and informed consent during registration or subsequently in your account notification settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Vital interests: In exceptional circumstances, krikta may process personal data where necessary to protect a person's vital interests — for example, where a Player's communications indicate a risk to their own safety in the context of a gambling harm situation.
Section 4
How We Use Your Data
krikta uses personal data collected from Bangladesh players for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or having a separate lawful basis for doing so.
Creating, verifying, and maintaining your krikta account; authenticating your identity at login via OTP; processing password resets; managing your responsible gaming preferences; and communicating important account notices.
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, and other supported payment methods; maintaining transaction records; verifying payment method ownership; and resolving payment disputes.
Detecting and preventing unauthorised account access, duplicate account creation, fraudulent deposits, bonus abuse, money laundering, and other prohibited conduct outlined in krikta's Terms & Conditions.
Customising the krikta Platform experience based on your game preferences, betting history, and location within Bangladesh. This includes surfacing relevant cricket betting markets, slot game recommendations, and seasonal promotions like BPL bonuses.
Analysing aggregated and anonymised usage patterns to improve krikta's platform performance, game library, payment flow, and customer support quality. Individual player data is never sold for commercial analytics purposes.
Meeting krikta's legal obligations including AML record-keeping, KYC identity verification, responsible gaming duty-of-care obligations, and responding to lawful information requests from competent authorities.
krikta will never sell your personal data to third-party advertisers, data brokers, or marketing aggregators. Your personal information is an asset held in trust — it is used to serve your experience on the krikta Platform, to keep the Platform safe, and to meet our legal obligations. Nothing more.
Section 5
Data Sharing & Third Parties
krikta does not share your personal data with third parties except in the specific and limited circumstances described below. All third parties with whom krikta shares personal data are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to krikta.
- Payment processors: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Islami Bank, Dutch-Bangla Bank, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy terms in addition to its contractual obligations to krikta.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers (not your full personal profile) to deliver their game content and RNG certification reporting. These providers do not receive your name, mobile number, or payment details.
- Identity verification services: Third-party KYC verification providers may process your identity documents on krikta's behalf to confirm your age and identity. These providers operate under strict data processing agreements and are required to delete source documents after verification is complete.
- Analytics and fraud detection providers: Aggregated and pseudonymised technical data (IP ranges, device fingerprints, behavioural patterns) may be processed by fraud detection partners to identify suspicious activity across the krikta Platform. These partners do not receive individually identifiable player profiles.
- Legal and regulatory authorities: krikta may be required by applicable law, court order, or regulatory directive to disclose certain personal data to law enforcement agencies, financial intelligence units, or other competent authorities. krikta will comply with such requests only to the extent legally required and will notify the affected Player where permitted to do so.
- Business transfers: In the event that krikta undergoes a corporate restructuring, merger, or acquisition, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.
We Do Not Sell Your Data: krikta does not sell, rent, trade, or license personal data to any third party for commercial gain. Data shared with the third-party categories listed above is shared solely to deliver the krikta service, maintain security, and meet legal obligations — never for third-party marketing or profiling purposes.
Section 7
Data Retention Periods
krikta retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of active account + 5 years after closure | AML and KYC record-keeping obligations |
| Identity verification documents | 5 years from the date of verification | Regulatory compliance and fraud investigation support |
| Financial transaction records | 5 years from the date of each transaction | AML reporting obligations and dispute resolution |
| Betting and gaming history | Duration of active account + 2 years after closure | Dispute resolution, bonus calculation auditing, responsible gaming monitoring |
| Support communications | 2 years from the date of the last message in the thread | Quality assurance, dispute resolution, and staff training |
| Technical and device logs | 13 months from collection | Security incident investigation and fraud detection |
| Marketing preference records | Duration of account + 3 years after closure | Proof of consent / opt-out for regulatory purposes |
| Responsible gaming records | 5 years from the date of self-exclusion or limit setting | Duty-of-care compliance and re-registration checks |
At the end of each applicable retention period, personal data is either securely deleted from krikta's systems or anonymised in a manner that renders it impossible to re-identify the individual to whom it relates. Anonymised data may be retained indefinitely for aggregate statistical analysis.
Section 8
Security Measures
krikta employs a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect the personal data of all Bangladesh players against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:
- TLS encryption in transit: All data transmitted between your browser or mobile device and krikta's servers is protected by Transport Layer Security (TLS 1.2 or higher). This ensures that your registration data, payment credentials, and session activity cannot be intercepted in transit — including on mobile networks commonly used by players in Dhaka, Chittagong, and Sylhet.
- Encryption at rest: Personal data stored in krikta's databases — including identity verification documents and payment account references — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data stores.
- Access controls: Access to personal data within krikta's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular privacy and security training. Access logs are maintained and reviewed.
- Two-factor authentication on accounts: krikta encourages all Bangladesh players to enable SMS OTP two-factor authentication (2FA) from their account security settings. This significantly reduces the risk of unauthorised account access even if your password is compromised.
- Penetration testing: krikta's systems and infrastructure undergo regular penetration testing by independent security professionals. Identified vulnerabilities are remediated within a documented timeframe based on severity classification.
- Data breach response: krikta maintains a documented data breach response plan. In the event of a breach that is likely to result in a high risk to your rights and freedoms, krikta will notify affected Players at their registered mobile number or email address without undue delay and will describe the nature of the breach, the data involved, and the steps taken to address it.
Your Role in Security: No security system is impenetrable. You play an important role in keeping your krikta account secure. Use a strong, unique password, enable SMS OTP 2FA, never share your credentials with anyone, and log out after each session — especially when using shared devices or public Wi-Fi networks. Report any suspicious activity immediately to [email protected].
Section 9
Your Data Rights
krikta respects your rights over your personal data. You may exercise any of the following rights at any time by contacting the krikta privacy team at [email protected] with the subject line "Data Rights Request". krikta will respond within two (2) Bangladesh business days and will fulfil verified requests within thirty (30) calendar days of receipt.
Request a copy of all personal data krikta holds about you, the purposes for which it is processed, and the third parties with whom it has been shared.
Request correction of any inaccurate or incomplete personal data we hold. You may also update most of your account details directly from the krikta account dashboard.
Request deletion of your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent and no other lawful basis applies. Note: legal retention obligations may prevent immediate full deletion.
Request that krikta restrict the processing of your data — for example, while you contest its accuracy or while an objection is being assessed. Restricted data is retained but not actively processed.
Request your personal data in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible, covering data you provided directly and that we process on a contractual or consent basis.
Object to krikta processing your personal data on the basis of legitimate interests — for example, profiling for fraud detection. krikta will cease such processing unless compelling legitimate grounds override your interests.
Withdraw consent for marketing communications at any time via your account notification settings or by contacting support. Withdrawal does not affect processing carried out before the withdrawal date.
Request human review of any significant decision made about you solely by automated means — such as an automated account restriction triggered by fraud-detection algorithms — where that decision produces legal or similarly significant effects.
krikta will not charge a fee for responding to data rights requests submitted in good faith. krikta may ask you to verify your identity before processing a request by sending an OTP to your registered Bangladesh mobile number. This is a security measure to ensure we do not disclose personal data to an unauthorised party.
Section 10
Marketing Communications
krikta sends marketing communications — including promotional SMS messages, email newsletters, and in-Platform notifications about bonuses, new game launches, BPL cricket betting offers, Eid promotions, and Pohela Boishakh special events — only to Players who have given their explicit consent to receive such communications at the time of registration or subsequently via their account notification settings.
You may opt out of any category of marketing communication at any time without affecting your ability to use the krikta Platform. To manage your marketing preferences, navigate to the Notifications section of your krikta account dashboard after logging in. Alternatively, contact the krikta support team at [email protected] and our team will update your preferences within one (1) Bangladesh business day.
- SMS promotions: Opt in or out from account settings. Opting out stops all promotional SMS; important account and security notifications (e.g., OTP, withdrawal confirmation) are still sent as these are transactional, not marketing communications.
- Email newsletters: Opt in or out from account settings. Includes weekly bonus digest, seasonal promotions, and game library updates.
- In-Platform notifications: Shown within the krikta logged-in interface. Can be muted by category (bonus alerts, game recommendations, cricket match reminders) from the notification preferences panel.
- Self-excluded players: If you have activated self-exclusion or a cooling-off period, all marketing communications are suspended automatically for the duration of your exclusion regardless of your prior marketing preferences. This suspension is immediate and requires no separate action on your part.
Transactional vs Marketing Messages: Not all SMS and email messages from krikta are marketing communications. Transactional messages — such as deposit confirmation, withdrawal processing notification, OTP codes, and account security alerts — are sent regardless of your marketing opt-out status because they are necessary for the operation of your account and cannot be disabled.
Section 11
Children's Privacy
The krikta Platform is strictly intended for adults aged 18 and above. krikta does not knowingly collect personal data from any person under the age of 18. During the registration process, all applicants are required to confirm their date of birth and their acceptance of the 18+ age restriction. krikta may request documentary proof of age — including a copy of a national identity document — at registration or at the time of any withdrawal request.
If krikta discovers or is notified that an account has been registered by a person under the age of 18, the following actions will be taken immediately:
- The account will be permanently suspended with immediate effect.
- All personal data associated with the account will be flagged for expedited deletion, subject only to any retention obligations required to document the compliance breach.
- All funds on the account will be frozen pending investigation and will not be returned to the account holder given the breach of krikta's Terms & Conditions.
- Any parent or guardian who identifies that a minor has registered with krikta is encouraged to contact the support team at [email protected] immediately so that the account can be closed and data erased without delay.
18+ Only — No Exceptions: krikta takes the protection of minors extremely seriously. If you are under 18 years of age, you must not register an account, deposit funds, place bets, or access any gaming content on the krikta Platform. Parents and guardians are encouraged to use parental control software to restrict access to online gambling websites for minors in their household.
Section 12
Updates to This Policy
krikta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulation, or changes to the krikta Platform's features and services. The effective date at the top of this page indicates when this version of the Privacy Policy was last updated.
When we make material changes to this Privacy Policy — meaning changes that substantially affect your rights or how we use your personal data — we will notify all registered Bangladesh players by SMS to their registered mobile number and by in-Platform notification at next login, at least seven (7) calendar days before the changes take effect. Minor changes such as corrections of typographical errors, clarifications that do not alter the substantive meaning, or updates to contact details do not require advance notice but will be reflected in the updated effective date.
Your continued use of the krikta Platform after any revised Privacy Policy takes effect constitutes your acknowledgement of the updated policy. If you do not agree with the revised policy, you must stop using the Platform and may request account closure by contacting the krikta support team. Closed accounts remain subject to the data retention periods described in Section 7 above.
The most current version of this Privacy Policy is always available at https://krikta.com/privacy-policy. We recommend revisiting this page periodically, particularly around major Platform updates or seasonal promotions such as BPL, IPL, or Eid campaigns where new data processing features may be introduced.
Version History: This Privacy Policy is effective as of 1 January 2026. Previous versions are available on request by contacting [email protected] with the subject line "Privacy Policy Version Request".
Your Next Steps
Ready to Experience krikta Responsibly?
Now that you understand how krikta protects your data, explore cricket betting, jackpot slots, and live casino games — all secured with SSL encryption and built for Bangladesh players. 18+ only. Play responsibly.
18+ only. Gambling involves risk. Play responsibly. For adults aged 18 and above only.
Understand the full terms that govern your use of the krikta Platform, including account rules, bonus conditions, withdrawal requirements, and prohibited conduct.
View TermsLearn about deposit limits, session timers, cooling-off periods, and self-exclusion tools available on krikta. We are committed to safe gaming for every Bangladesh player.
Learn MoreHave questions about deposits via bKash or Nagad, account verification, bonuses, or withdrawal timelines? Our FAQ page has clear answers for Bangladesh players.
View FAQ