kerkiya Privacy Policy

kerkiya ("kerkiya", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the kerkiya platform at https://kerkiya.bid. This Privacy Policy sets out in clear terms the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject.

This Privacy Policy applies to all kerkiya platform users, including registered account holders, prospective players who browse the platform without registering, and any individual who contacts kerkiya support. It applies to personal data collected via the kerkiya website, any browser-based interface, and any communication channel operated by kerkiya including live chat and email.

This Policy should be read together with the kerkiya Terms & Conditions, which also form part of the agreement between you and kerkiya. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

kerkiya collects personal data from players across several categories. The specific data collected depends on the nature of your interaction with the kerkiya platform. The following table summarises the categories of data we collect and the typical sources from which they are obtained:

kerkiya does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where a player voluntarily discloses such information during a responsible gaming self-exclusion or support interaction, in which case it is processed solely for the purpose of providing appropriate assistance.

kerkiya processes the personal data it collects for the following specific purposes:

• Account Registration and Management: To create, maintain, and administer your kerkiya account, including verifying your identity, managing your login credentials, and processing account closure requests.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 18 years and that your identity matches the details provided during registration. KYC verification is required before withdrawals are processed.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other accepted payment methods. Financial data is shared with payment processors solely to facilitate transactions.
• Gameplay and Betting Services: To deliver the casino games, sports betting markets, and all associated platform features that constitute the kerkiya service.
• Bonus and Promotion Administration: To verify eligibility for promotions, credit bonus funds, track wagering progress, and enforce applicable bonus terms.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of all support interactions for quality assurance purposes.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-exclusion arrangements you have requested, and to administer deposit limits and session reminders you have set.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited conduct listed in the kerkiya Terms & Conditions.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, data retention mandates, and responses to lawful requests from authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the kerkiya platform, fix technical issues, optimise game performance, and enhance the overall user experience.
• Direct Communications: To send you transactional notifications relating to your account (e.g., deposit confirmations, withdrawal updates, security alerts). With your explicit consent, we may also send promotional communications about kerkiya offers and new games.

kerkiya processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for kerkiya to perform its obligations under the contract established when you register a kerkiya account and accept the Terms & Conditions. This includes account creation, payment processing, and delivery of gaming services.
• Legal Obligation: Processing that kerkiya is required to carry out to comply with applicable law, including identity verification, anti-money laundering checks, and retention of transaction records.
• Legitimate Interests: Processing that is necessary for kerkiya's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing for which kerkiya has obtained your explicit, freely given, and informed consent. This applies primarily to the sending of promotional and marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kerkiya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. kerkiya may share your personal data with the following categories of third parties, strictly for the purposes described in this Privacy Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other approved payment processors receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Game Providers and Software Suppliers: Third-party game studios and platform technology providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited account and session data necessary to deliver their games on the kerkiya platform. These providers act as data processors under contract with kerkiya.
• Identity Verification Providers: Third-party KYC and age verification service providers may process identity documents and personal data submitted during the verification process on kerkiya's behalf.
• Fraud Prevention and AML Services: Specialist fraud detection and anti-money laundering technology providers may receive transaction data and device fingerprint data to assist kerkiya in detecting and preventing financial crime.
• Legal and Regulatory Authorities: kerkiya may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of kerkiya, its players, or the public.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers engaged by kerkiya may access personal data on a strictly need-to-know basis in the course of providing professional services.

kerkiya uses cookies and similar tracking technologies on the kerkiya platform to deliver core functionality, maintain session state, and analyse platform usage. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not harm your device and do not contain executable code.

kerkiya uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the kerkiya platform to function. They maintain your login session, remember your account preferences, and ensure that security features operate correctly. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember choices you have made on the platform — such as your preferred game display settings or language selection — to provide a more personalised experience on your return visits.
• Analytics Cookies: kerkiya uses anonymised analytics cookies to understand how players navigate the platform, which games are most popular, and where technical issues may be occurring. This data is used in aggregate form only and cannot be used to identify individual players.
• Security Cookies: These cookies support kerkiya's fraud detection systems by recording device and session fingerprint data to identify unusual access patterns that may indicate unauthorised account access or automated bot activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your kerkiya account and using core platform features. kerkiya does not use third-party advertising or retargeting cookies.

kerkiya retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

When data reaches the end of its retention period, kerkiya will securely delete or irreversibly anonymise it so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and platform improvement purposes.

kerkiya implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the kerkiya platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. This prevents interception of your data in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial information — is stored in encrypted form in kerkiya's secure database infrastructure. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within kerkiya's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access player personal data, and all such access is logged and audited.
• Password Security: kerkiya never stores player passwords in plain text. Passwords are stored as salted cryptographic hashes using industry-standard hashing algorithms.
• Intrusion Detection: kerkiya's platform infrastructure is monitored continuously for signs of unauthorised access attempts, denial-of-service attacks, and other security threats.
• Vendor Security Standards: All third-party data processors engaged by kerkiya are required to maintain security standards at least equivalent to those described in this section.

As a kerkiya player whose personal data is processed by kerkiya, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the kerkiya support team via live chat or at [email protected]:

• Right of Access: You have the right to request a copy of the personal data kerkiya holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to Rectification: If any personal data kerkiya holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You have the right to request that kerkiya delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to kerkiya's legal obligations to retain certain data for defined periods.
• Right to Restriction of Processing: You have the right to request that kerkiya restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to processing on the basis of legitimate interests while that objection is evaluated.
• Right to Data Portability: Where kerkiya processes your personal data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to kerkiya's processing of your personal data on the basis of legitimate interests. kerkiya will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where kerkiya processes your personal data on the basis of consent (primarily for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

kerkiya will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, kerkiya may extend this period by a further 60 days, notifying you of the extension within the initial 30-day period.

The kerkiya platform is strictly intended for adults aged 18 years and above. kerkiya does not knowingly collect, process, or retain personal data from any individual under the age of 18. Registration on the kerkiya platform requires the affirmative declaration that the registering individual is 18 years of age or older, and kerkiya conducts age verification checks on all accounts before withdrawals are approved.

If kerkiya becomes aware that personal data has been collected from a person under the age of 18, all data relating to that individual will be immediately and permanently deleted, the account will be closed, any deposits will be returned to the originating payment method, and the matter will be escalated in accordance with kerkiya's child protection procedures.

Parents or guardians who believe that a minor may have created a kerkiya account or provided personal data to kerkiya are strongly encouraged to contact kerkiya support via live chat immediately so that the matter can be investigated and resolved without delay.

The kerkiya platform may contain references to third-party game providers, payment services, or technology partners. While kerkiya takes reasonable care in selecting its partners, kerkiya does not control the privacy practices of third-party platforms and accepts no responsibility for their data handling procedures.

Any personal data you provide directly to a third-party service — whether a game provider's standalone platform, a payment provider's application, or any other external service — is governed exclusively by that third party's own privacy policy. kerkiya strongly encourages all players to review the privacy policies of any third-party service before providing personal data.

kerkiya reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, kerkiya's data processing practices, or the structure of the kerkiya platform. When material amendments are made, the updated Privacy Policy will be published on the kerkiya platform with a revised effective date, and registered players will be notified via the email address associated with their account or via an on-platform notification displayed upon next login.

Your continued use of the kerkiya platform following the publication of an amended Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the amended Privacy Policy, you must cease using the kerkiya platform and may request account closure by contacting kerkiya support via live chat.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kerkiya's processing of your personal data, please contact the kerkiya data privacy team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the kerkiya platform. Live chat is the recommended channel for urgent data rights requests and account-related privacy matters.
• Email: [email protected] (plain text — not a clickable link). Email responses are provided within 48 hours for general enquiries and within 30 calendar days for formal data rights requests.

When submitting a formal data rights request by email, please include your registered kerkiya username, a clear description of your request, and confirmation of your identity. kerkiya may request additional verification before processing your request to ensure that your personal data is disclosed only to you.

kerkiya is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with kerkiya's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.