kiriya 11 Privacy Policy

Information We Collect

kiriya 11 collects personal information from you in order to operate a safe, compliant, and enjoyable online casino and sports betting platform for players across Bangladesh. The categories of data we collect, and the context in which each is gathered, are set out in detail below.

1.1 Registration Data

When you create a kiriya 11 account, we ask you to provide the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth — used to verify that you meet the 18+ age requirement;
• Email address — used as your primary account identifier and for transactional communications;
• Mobile phone number — used for account security, two-factor authentication, and support communications;
• Residential address in Bangladesh, including division, district, and postal code;
• Preferred currency — Bangladeshi Taka (BDT) is the default and primary currency of the Platform.

1.2 KYC Verification Documents

In accordance with our Know Your Customer (KYC) obligations, we may request copies of the following documents before processing your first withdrawal or in response to a security review:

• National Identity Card (NID) — front and back;
• Valid passport (biographical data page);
• Bangladesh driving licence;
• Utility bill or bank statement issued within the last 3 months, confirming your residential address;
• Screenshot or transaction confirmation from your bKash, Nagad, Rocket, or Upay account confirming the registered mobile number and account holder name match your kiriya 11 profile.

KYC documents are processed by our dedicated verification team and stored in an encrypted document management system. Access is restricted to authorised personnel with a legitimate operational need.

1.3 Financial Data

kiriya 11 records transactional data associated with your deposits and withdrawals, including the payment method used, the transaction amount in BDT, the timestamp of each transaction, and the transaction reference number provided by the payment processor. We do not store full bank account numbers or card numbers directly on our servers; sensitive payment credentials are handled by our PCI-compliant payment partners.

1.4 Gameplay and Betting Activity

The Platform automatically records your gameplay activity, including the games you play, the bets you place (amount, market, and outcome), session start and end times, real-money and bonus wallet balances, and any responsible gaming settings you have applied to your account. This data is used to deliver the service, resolve disputes, detect problem gambling behaviour, and improve the Platform.

1.5 Technical and Device Data

When you access kiriya 11 through any device — desktop, mobile, or tablet — our servers and analytics tools automatically collect certain technical information, including:

• IP address and approximate geographic location (city-level, not precise GPS coordinates);
• Device type, operating system, and browser version;
• Referring URL and pages visited within the kiriya 11 Platform;
• Session duration, click paths, and feature interactions.

This technical data is used for fraud detection, security monitoring, platform performance optimisation, and aggregate analytics. It is not used to build individual marketing profiles or sold to third-party advertisers.

1.6 Communications Data

If you contact the kiriya 11 support team via email or live chat, we retain records of those communications, including the content of messages exchanged and any attachments submitted. These records are used to resolve your query, train our support team, and as evidence in the event of a dispute.

How We Use Your Data

kiriya 11 processes your personal data only for clearly defined, legitimate purposes. We do not process personal data in ways that are incompatible with the purpose for which it was originally collected. The following table summarises the primary purposes for which we process your data and the lawful basis for each.

2.1 Promotional Communications

kiriya 11 may send you promotional emails or SMS notifications about new games, seasonal offers (such as Eid or Pohela Boishakh promotions), tournament announcements, and BPL or T20 cricket betting previews — but only if you have expressly opted in to marketing communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by emailing [email protected]. Withdrawing marketing consent does not affect the receipt of essential transactional messages (such as deposit confirmations or security alerts), which are sent regardless of marketing preferences as they form part of the service.

2.2 Automated Decision-Making

kiriya 11 employs automated systems to detect fraudulent activity, flag unusual betting patterns, and identify signs of problem gambling behaviour. In some cases, these automated systems may trigger account restrictions without human review at the point of the automated action. Where a decision has a significant impact on your account (such as a withdrawal hold or account suspension), our compliance team will conduct a manual review within 24 hours and communicate the outcome to you directly. You have the right to request human review of any automated decision that affects your account — please contact [email protected] to exercise this right.

Cookies and Tracking Technologies

3.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on return visits and store certain preferences or session information. kiriya 11 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform efficiently and provide a personalised experience.

3.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your logged-in session, remember your game state, and enable secure payment flows. These cookies cannot be disabled without breaking Platform functionality.
• Performance and analytics cookies: These collect aggregated, anonymised data about how players use the Platform — which pages are most visited, how long sessions last, and where players encounter errors. This data helps us improve the Platform. No individual player is identified through these cookies.
• Functionality cookies: These remember your preferences such as language selection, preferred sports markets, and notification settings, so you do not have to re-enter them on each visit.
• Security cookies: Short-lived cookies used to detect and prevent cross-site request forgery (CSRF), session hijacking, and other security threats. These are mandatory and cannot be disabled.

3.3 Third-Party Cookies

Some kiriya 11 games are delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may place their own cookies on your device in order to maintain the game session, record game outcome data for certification purposes, and detect cheating or bot activity. kiriya 11 does not control the cookie policies of third-party game providers but requires all providers to maintain data processing standards consistent with this Privacy Policy as a condition of their integration with the Platform.

3.4 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please be aware that disabling strictly necessary cookies will impair the functionality of the kiriya 11 Platform and may prevent you from logging in, making deposits, or playing games. Disabling performance or functionality cookies will not prevent you from using the Platform but may affect your experience.

Data Sharing and Disclosure

kiriya 11 does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial gain. We share your data only where it is strictly necessary for the operation of the Platform, required by law, or done with your explicit consent. The categories of recipients who may receive your data are set out below.

4.1 Payment Processors

To process your deposits and withdrawals, kiriya 11 must share necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. The data shared is limited to the minimum required to complete the transaction: your registered name, the transaction amount in BDT, and your payment method reference number. Payment processors are contractually prohibited from using this data for any purpose other than completing the transaction.

4.2 Game Providers

When you play a game on the kiriya 11 Platform, limited session data (a pseudonymous player token, your account balance, and bet/win amounts) is shared with the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) in order to deliver the game, record the outcome, and return the result to your kiriya 11 wallet. Game providers receive pseudonymous identifiers rather than your full name or contact details.

4.3 Fraud Prevention and Security Services

kiriya 11 uses third-party fraud detection and cybersecurity services to protect the Platform and its players. These services may process IP addresses, device fingerprints, and behavioural signals. All third-party security providers operate under strict data processing agreements that prohibit the use of kiriya 11 player data for any purpose outside fraud prevention and platform security.

4.4 Legal and Regulatory Disclosure

kiriya 11 may be required by law, court order, or regulatory authority to disclose your personal data. In such cases, we will disclose the minimum data necessary to comply with the legal obligation and, where legally permitted, will notify you that such a request has been received. We do not voluntarily cooperate with data requests from governments or agencies that lack a valid legal basis for the request.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the kiriya 11 business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify affected players via the email address registered to their account prior to the transfer taking effect, and will ensure that the receiving entity maintains privacy standards no less protective than those set out in this Policy.

Data Retention

kiriya 11 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements. The following retention periods apply to the main categories of data we hold.

• Account registration data: Retained for the lifetime of your active account plus a minimum of 5 years following permanent account closure. This retention period supports our legal obligations and enables us to respond to regulatory inquiries or legal claims arising after closure.
• KYC documents: Retained for a minimum of 5 years from the date of the most recent KYC verification event on your account. Document copies are held in an encrypted archive and access is restricted to authorised compliance personnel.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Gameplay and betting history: Retained for a minimum of 5 years. This data is used for dispute resolution, responsible gaming monitoring, and compliance audit purposes.
• Customer support communications: Retained for 3 years from the date of the final message in each support thread.
• Technical and device data (logs): Retained for 12 months on a rolling basis, after which raw log data is either deleted or anonymised for aggregated analytics use.
• Marketing consent records: Retained for the duration of your account plus 2 years following account closure, to demonstrate compliance with consent-based marketing rules.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and business intelligence purposes.

Your Privacy Rights

As a kiriya 11 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 2 business days and respond in full within 30 calendar days, free of charge.

kiriya 11 will not discriminate against you for exercising any of the rights described above. Exercising your privacy rights will not affect your ability to use the Platform, subject only to the practical consequences of the right in question (for example, requesting erasure of identity data that is required for KYC compliance would necessitate account closure).

Data Security

kiriya 11 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The key security measures in place include the following.

7.1 Encryption

All data transmitted between your device and the kiriya 11 Platform is encrypted using Transport Layer Security (TLS 1.3) with 256-bit encryption. Data stored in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service with role-based access controls.

7.2 Access Controls

Access to kiriya 11's internal systems and player databases is governed by the principle of least privilege: each team member is granted only the minimum level of access necessary to perform their specific function. All internal access is authenticated via multi-factor authentication (MFA), and access logs are retained and reviewed on a regular basis. Administrative access to production systems is additionally protected by IP allowlisting.

7.3 Infrastructure Security

The kiriya 11 Platform is hosted on enterprise-grade cloud infrastructure with physical access controls, redundant power supplies, and 24/7 monitoring. Our servers are protected by next-generation firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Regular penetration testing is conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.

7.4 Data Breach Response

kiriya 11 maintains a documented data breach response plan. In the event of a security incident that results in the unauthorised access to or disclosure of personal data, we will investigate the incident promptly, contain the breach, assess the risk to affected players, and notify impacted individuals via the email address registered to their account without undue delay. We will describe the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the measures we have taken or propose to take to address it.

Contact and Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how kiriya 11 handles your personal data, please contact our support and data protection team using the details below.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 1 hour during standard Bangladesh Standard Time (BST, UTC+6) operating hours; within 24 hours at all other times.
• Availability: 24 hours a day, 7 days a week.
• Language: All privacy-related enquiries are handled in English.

When submitting a privacy rights request, please include your full name as registered on your kiriya 11 account and the email address associated with your account so that we can verify your identity before acting on the request. For security reasons, we cannot action privacy requests from unverified senders.

This Privacy Policy was last reviewed and updated on 1 January 2026. kiriya 11 reserves the right to update this Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The updated Policy will be published on this page with a revised effective date. Your continued use of the kiriya 11 Platform after a Policy update constitutes your acceptance of the revised terms. Where a change is material, we will notify you via email at least 7 days before the change takes effect.