Kirkira Privacy Policy — How We Protect Your Personal Data

This Privacy Policy explains how kirkira collects, uses, stores, and protects the personal data of players who register and use the kirkira platform at kirkira.club. Kirkira is committed to handling your personal data responsibly and transparently. This policy is written in plain language so that every Bangladesh player can understand exactly how their information is managed.

By creating a kirkira account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how kirkira handles personal data, you should not register or continue using the platform. If you have questions about anything in this policy, contact kirkira's support team at [email protected] before proceeding.

Kirkira collects personal data in three ways: data you provide directly when registering or using the platform, data generated automatically by your use of the platform, and data received from third-party payment processors for the purpose of verifying transactions.

Kirkira does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or responsible gaming obligations.

Kirkira uses your personal data only for legitimate purposes directly related to operating the platform and serving Bangladesh players. The table below sets out the specific purposes and the legal basis for each.

• Account management: To create, maintain, and secure your kirkira account, including verifying your identity and age.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods in BDT.
• Platform security: To detect and prevent fraud, money laundering, account takeovers, and other security threats.
• Responsible gaming: To monitor gaming patterns and identify players who may need support, in line with kirkira's responsible gaming commitments.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of kirkira's support service.
• Legal compliance: To meet kirkira's obligations under applicable laws, including anti-money laundering regulations.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the kirkira platform experience for all players.

Kirkira does not sell, rent, or trade your personal data to any third party. Data is shared externally only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, and other payment partners receive the minimum data required to process your transactions. These partners are bound by their own data protection obligations.
• Identity verification providers: Where KYC verification is required, kirkira may share your identity documents with a licensed verification service. These providers process data solely for verification purposes.
• Legal authorities: Kirkira will disclose personal data to law enforcement or regulatory authorities where required by law or valid legal process. Kirkira will notify you of such disclosures where legally permitted to do so.
• Platform infrastructure providers: Kirkira uses third-party hosting and cloud infrastructure. These providers have access to data only as necessary to provide their services and are contractually bound to protect it.

All third parties who receive kirkira player data are required to handle it in accordance with applicable data protection standards. Kirkira does not permit third parties to use your data for their own marketing or commercial purposes.

Kirkira retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your kirkira account and for 5 years after account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for 7 years from the date of the transaction to comply with financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the last communication.
• Technical and usage data: Retained in anonymised, aggregated form for platform analytics. Individual-level technical data is deleted after 12 months.
• Identity verification documents: Retained for the duration of your account and for 5 years after closure.

Kirkira uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it. Cookies are small text files stored on your device when you visit kirkira.club.

• Essential cookies: Required for the kirkira platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Preference cookies: Remember your kirkira settings, such as your preferred language and display options. These can be disabled, but doing so may affect your experience.
• Analytics cookies: Help kirkira understand how players navigate the platform so we can improve it. Data collected is aggregated and anonymised. You can opt out of analytics cookies via your account settings.

Kirkira does not use third-party advertising cookies. You will not see kirkira-targeted advertisements on other websites based on your activity on kirkira.club. You can manage cookie preferences through your browser settings at any time.

Kirkira takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, or disclosure.

• All data in transit between your device and kirkira's servers is encrypted using 256-bit SSL/TLS.
• Kirkira account passwords are stored using industry-standard one-way hashing. Kirkira staff cannot see your password.
• Access to personal data within kirkira is restricted to authorised personnel on a need-to-know basis.
• Kirkira's infrastructure is hosted in secure data centres with physical access controls, redundant power, and 24/7 monitoring.
• Kirkira conducts regular security audits and penetration testing to identify and address vulnerabilities.
• Two-factor authentication (2FA) is available for all kirkira accounts and is strongly recommended.

Despite these measures, no online platform can guarantee absolute security. If kirkira becomes aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law.

As a kirkira player, you have the following rights over your personal data. To exercise any of these rights, contact kirkira at [email protected]. Kirkira will respond within 30 days of receiving your request.

• Right of access: Request a copy of all personal data kirkira holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: Request that kirkira restricts processing of your data in certain circumstances.
• Right to data portability: Request your personal data in a structured, machine-readable format.
• Right to object: Object to kirkira processing your data for direct marketing or other purposes based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Kirkira's platform is strictly for adults aged 18 and over. Kirkira does not knowingly collect personal data from anyone under the age of 18. If kirkira discovers that a minor has registered an account, the account will be closed immediately and all personal data associated with it will be deleted.

If you believe a minor has registered on kirkira, please contact [email protected] immediately. Kirkira will investigate and take appropriate action within 24 hours of receiving the report.

Kirkira may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or data handling practices. When material changes are made, kirkira will notify registered players via email and update the "Last updated" date at the top of this page.

Continued use of the kirkira platform after an updated Privacy Policy has been published constitutes acceptance of the revised policy. Kirkira recommends checking this page periodically to stay informed about how your data is handled.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how kirkira handles your personal data, please get in touch. Kirkira's support team is available 24 hours a day, 7 days a week.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Live Chat: Available from your kirkira account dashboard, 24/7.
• Help Centre: Browse the FAQ for quick answers to common privacy questions.

Kirkira aims to respond to all privacy-related enquiries within 24 hours and to complete data rights requests within 30 days of receiving a verified request.