Privacy Policy
at kiriya44

For the purposes of this Privacy Policy, the data controller responsible for the personal data of kiriya44 members is kiriya44, operating the online casino and sports betting platform accessible at kiriya44.net (the "Platform"). References to "kiriya44", "we", "us", or "our" throughout this document refer to kiriya44 in its capacity as data controller.

As data controller, kiriya44 determines the purposes and means by which personal data is processed. kiriya44 is committed to processing all personal data lawfully, fairly, and transparently in accordance with applicable data protection principles.

All privacy-related enquiries, data access requests, data correction requests, and data deletion requests should be directed to the kiriya44 data support contact:

kiriya44 operates for members based in Bangladesh and applies data handling standards appropriate to the Bangladesh market. References to time in this policy use Bangladesh Standard Time (BST, UTC+6).

kiriya44 collects personal data through multiple touchpoints: account registration, deposits and withdrawals, gameplay activity, customer support interactions, and use of the Platform generally. The following table summarises the categories of personal data collected and the source of each category:

kiriya44 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information unless specifically required by law for identity verification purposes. Where such data must be collected (for example, a government-issued ID that includes a photograph), it is handled with enhanced security controls and deleted as soon as the verification purpose has been fulfilled.

kiriya44 does not knowingly collect personal data from individuals under the age of 18. Any account found to have been registered by a minor will be immediately suspended and all associated data reviewed in accordance with kiriya44's child protection obligations.

kiriya44 processes your personal data only for specific, clearly defined purposes. We do not use personal data in ways that are incompatible with the purposes for which it was originally collected. The lawful bases and operational purposes for each processing activity are set out below:

• Account administration. To create, maintain, and manage your kiriya44 member account, including authentication, password resets, and profile updates. Lawful basis: performance of a contract.
• Payment processing. To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to reconcile transaction records; and to investigate disputed payments. Lawful basis: performance of a contract.
• Identity and age verification (KYC). To verify that you are who you say you are, that you are at least 18 years of age, and that your payment methods are registered in your own name, in compliance with anti-money laundering (AML) obligations. Lawful basis: legal obligation.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, multi-accounting, and unauthorised account access. Lawful basis: legitimate interests.
• Responsible gaming controls. To monitor account activity for indicators of problem gambling, to apply deposit limits or self-exclusion restrictions requested by the member, and to fulfil our duty of care obligations. Lawful basis: legal obligation and legitimate interests.
• Platform improvement. To analyse aggregated, anonymised usage data to understand how members interact with the Platform, identify technical issues, and improve game offerings and user experience. Lawful basis: legitimate interests.
• Marketing communications. To send promotional emails, bonus notifications, and Platform updates to members who have actively opted in to receive marketing communications. Lawful basis: consent. You may withdraw consent at any time via your account settings or by emailing [email protected].
• Customer support. To respond to support requests, resolve disputes, and maintain records of communications for quality assurance and training purposes. Lawful basis: performance of a contract and legitimate interests.
• Legal compliance. To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement agencies, and maintain mandatory transaction records. Lawful basis: legal obligation.

kiriya44 does not sell, rent, or trade your personal data. Data may be shared with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose:

• Payment processors. Financial transaction data is shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to the extent required to process your deposit or withdrawal instruction. These providers are contractually bound to handle payment data securely and in accordance with applicable payment industry standards.
• Identity verification providers. Where kiriya44 engages a third-party KYC or age-verification service, identity documents and verification data are shared with that provider for the sole purpose of completing the verification check. Verification providers are bound by confidentiality agreements and data processing agreements with kiriya44.
• Game content providers. Certain game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session identifiers or game participation data necessary to operate their games on the Platform. These providers do not receive your full identity or contact data.
• Law enforcement and regulatory bodies. kiriya44 may disclose personal data to law enforcement agencies, courts, or regulators in response to a lawful request, court order, or statutory obligation. kiriya44 will notify the affected member of such a disclosure wherever legally permitted to do so.
• Business successors. In the event of a merger, acquisition, or transfer of all or part of kiriya44's business operations, member data may be transferred to the acquiring entity. Members will be notified of any such transfer and given the opportunity to close their account if they do not consent to the new data controller's privacy terms.

All third parties with whom kiriya44 shares personal data are required to maintain appropriate security measures and to process data only for the purposes for which it was shared. kiriya44 conducts periodic reviews of third-party data processors to ensure ongoing compliance with data protection obligations.

kiriya44 uses cookies and similar tracking technologies to operate the Platform, remember your session, and understand how members use our services. The following categories of cookies are in use on the kiriya44 Platform:

kiriya44 does not deploy third-party advertising cookies or tracking pixels that profile your browsing behaviour across unrelated websites. The analytics cookies used by kiriya44 are restricted to first-party or contracted analytics providers and produce only aggregated, anonymised reports.

You may configure your browser to reject or delete cookies at any time. Disabling strictly necessary or security cookies may impair your ability to log in and use the Platform. Disabling functional cookies means your preferences will not be saved between sessions. Instructions for managing cookies are available in the help documentation for all major browsers, including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.

kiriya44 does not use cross-site tracking, fingerprinting, or supercookies. Mobile app versions of the Platform (if applicable) use equivalent device-level identifiers governed by the same usage principles described in this section.

kiriya44 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal retention obligations. The following retention periods apply to each category of data:

• Active account data (identity, contact, financial, and account activity data): Retained for the full duration of your active account relationship with kiriya44, and for a further 5 years following account closure. This retention period reflects kiriya44's AML record-keeping obligations.
• KYC verification documents (ID copies, proof of address): Retained for 5 years from the date of the last transaction on the account, or from the date of account closure, whichever is later.
• Transaction records (deposit and withdrawal history in BDT): Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping practices.
• Customer support communications: Retained for 3 years from the date of the last communication in a support thread, to enable dispute resolution and quality review.
• Marketing preference records: Retained for 3 years from the date of the member's last interaction with a kiriya44 marketing communication, or until consent is withdrawn, whichever is earlier.
• Technical and server log data: Retained for 12 months in raw form, then aggregated and anonymised. Anonymised analytical data may be retained indefinitely.
• Self-exclusion records: Retained indefinitely to ensure that self-excluded members cannot be re-registered in violation of their exclusion request, even after account closure.

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. kiriya44 conducts periodic data audits to identify and action overdue data deletion obligations. If you have requested account closure, deletion of your personal data will be scheduled in accordance with the above retention periods — kiriya44 cannot delete data ahead of a mandatory legal retention period even upon request.

kiriya44 recognises and respects the following data rights for all members. To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of your request:

• Right of access. You have the right to request a copy of all personal data kiriya44 holds about you. kiriya44 will provide this information in a structured, readable format within 30 calendar days of receiving a valid request.
• Right to rectification. If any personal data held by kiriya44 is inaccurate or incomplete, you have the right to request correction. Where verification permits, corrections will be applied within 10 business days.
• Right to erasure. You may request that kiriya44 delete your personal data. kiriya44 will honour erasure requests to the fullest extent possible, subject to mandatory legal retention obligations described in Section 6. Data that must be retained by law will be flagged and isolated from active processing.
• Right to restriction of processing. In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that kiriya44 temporarily restrict processing of your data to storage only.
• Right to data portability. You may request that kiriya44 provide your personal data in a machine-readable format (e.g., CSV or JSON) so that it can be transferred to another service provider of your choice.
• Right to object. You have the right to object to processing of your personal data for direct marketing purposes at any time. Objection to marketing processing will be acted upon immediately. Objection to processing based on legitimate interests will be assessed on a case-by-case basis.
• Right to withdraw consent. Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time via your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

kiriya44 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. kiriya44 reserves the right to verify your identity before fulfilling a data request to protect against unauthorised third-party access to member data.

kiriya44 implements a layered approach to data security, combining technical, administrative, and physical controls to protect member personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between member devices and kiriya44 servers. HTTPS is enforced site-wide and HTTP connections are automatically redirected.
• Encryption at rest for sensitive data fields including identity documents, payment identifiers, and passwords. Passwords are stored exclusively as salted cryptographic hashes — kiriya44 team members cannot view your plaintext password.
• Role-based access control (RBAC) for all internal systems. Staff members access only the data necessary for their specific job function. All data access events are logged and subject to periodic audit review.
• Multi-factor authentication (MFA) enforced for all kiriya44 internal staff accounts that have access to member data. Members are strongly encouraged to enable optional 2FA on their own accounts for additional protection.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals to identify and remediate weaknesses before they can be exploited.
• Incident response procedure. In the event of a personal data breach that poses a risk to member rights, kiriya44 will notify affected members promptly — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the data affected, and the remediation steps taken.

While kiriya44 employs industry-standard security measures, no online platform can guarantee absolute security against all possible threats. Members are responsible for maintaining the security of their own account credentials and devices. kiriya44 recommends using a unique, strong password for your kiriya44 account and enabling 2FA to minimise the risk of unauthorised access.

kiriya44 is a gambling platform intended exclusively for adults aged 18 and above. kiriya44 does not knowingly collect personal data from anyone under the age of 18, and any attempt by a minor to register on or use the Platform is strictly prohibited.

kiriya44 employs automated and manual age-verification processes to identify accounts that may belong to minors. Where an underage account is detected, the account is immediately and permanently suspended, all data collected in connection with that account is isolated and subject to deletion review, and any funds deposited are returned to the verified payment source.

If a parent or guardian becomes aware that a minor has submitted personal data to kiriya44 without consent, they are requested to contact [email protected] immediately with the subject line "Child Protection Request". kiriya44 will investigate and take appropriate action, including deletion of the relevant data, within 5 business days of a confirmed report.

kiriya44 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. All updates will be published on this page with a revised Last Updated date shown at the top.

When a material change is made to this Privacy Policy — that is, a change that meaningfully affects how your personal data is collected, used, or shared — kiriya44 will notify registered members by email to the address held on file, and will display a prominent notice on the Platform for a minimum of 30 days following the change.

Minor updates — such as formatting corrections, typ ographical fixes, or clarifications that do not alter the substantive rights or obligations of any party — may be made without specific notification, although the Last Updated date will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Privacy Policy, you should cease using the Platform and request account closure by contacting [email protected] before the effective date of the change.

We recommend bookmarking this page and reviewing it periodically, particularly after receiving any promotional or policy-related communications from kiriya44. The version published at kiriya44.net/privacy-policy is always the current, legally effective version of this policy.