Privacy Policy

This Privacy Policy ("Policy") describes how kariky ("kariky", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who register an account on, or otherwise access and use, the kariky online casino and sports betting platform located at kariky.app (the "Platform").

kariky takes the privacy and security of your personal data seriously. We operate the Platform in accordance with the data protection principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. This Policy is designed to inform you fully about our data practices so that you can make genuinely informed decisions about your personal information.

By creating a kariky account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, please do not create an account or continue to use the Platform.

This Policy should be read in conjunction with kariky's Terms & Conditions and Responsible Gaming policy, both of which are incorporated herein by reference.

For the purposes of this Policy, kariky acts as the data controller in respect of all personal data collected from Players who access the Platform. As data controller, kariky determines the purposes for which personal data is processed and the means by which such processing is carried out.

All data-related enquiries, access requests, and objections may be directed to kariky's support team at the contact details provided in Section 14 of this Policy. kariky will respond to all legitimate data-related requests within a reasonable timeframe and in accordance with applicable obligations.

kariky collects personal data that is necessary to provide you with a secure, fair, and compliant gaming experience. The categories of personal data we may collect and hold include, but are not limited to, the following:

kariky collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotions.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, primarily via cookies and server-side logging (see Section 9).
• Payment processors: Transaction confirmation data shared with kariky by our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other integrated providers) when you make a deposit or request a withdrawal.
• Identity verification services: Where kariky uses a third-party KYC provider to cross-reference identity documents, that provider may return confirmation data to kariky as part of the verification workflow.
• Fraud prevention partners: Aggregated risk-scoring data from fraud detection services, used solely to identify and prevent fraudulent account activity.

kariky processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we process personal data, and the corresponding legal basis for each, are set out below:

• Account creation and management: Processing is necessary for the performance of the contract between you and kariky (i.e., provision of Platform services under the Terms & Conditions).
• Identity verification (KYC): Processing is necessary to comply with anti-money laundering and responsible gaming legal obligations applicable to kariky's operations.
• Processing deposits and withdrawals: Processing is necessary for the performance of the contract and for compliance with financial transaction record-keeping obligations.
• Fraud and security monitoring: Processing is justified by kariky's legitimate interest in maintaining a safe and secure Platform for all Players, and in preventing financial crime.
• Responsible gaming monitoring: Processing is justified by kariky's legal obligation to identify and support Players who may be experiencing gambling-related harm.
• Customer support: Processing is necessary for the performance of the contract and to enable effective resolution of Player enquiries and complaints.
• Marketing communications: Processing is based on your explicit consent, which you may withdraw at any time by contacting [email protected] or updating your account notification preferences.
• Platform analytics and improvement: Processing is justified by kariky's legitimate interest in understanding how the Platform is used in order to improve the experience for all Players.

kariky does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Your data may be shared with third parties only in the following circumstances:

• Payment processors: Transaction data is shared with your chosen payment provider (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard) solely to process your deposit or withdrawal. Each payment provider operates under its own privacy terms.
• Game providers: Limited account and session data may be transmitted to third-party game suppliers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to enable game delivery and round-result verification. These providers process data only as instructed by kariky and are bound by confidentiality obligations.
• Identity verification providers: Document images and identity data may be shared with a contracted KYC service provider for the sole purpose of completing your account verification. Results are returned to kariky and the provider retains no ongoing access to your data beyond what is operationally necessary.
• Fraud and risk management services: Anonymised or pseudonymised risk-scoring data may be shared with fraud detection partners to identify suspicious activity patterns that could indicate account compromise or financial crime.
• Legal and regulatory authorities: kariky may disclose personal data where required to do so by applicable law, court order, regulatory instruction, or where disclosure is necessary to protect the legal rights of kariky or third parties.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of kariky's business, Player data may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained.

kariky retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status and for a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of your account's active status and for one (1) year following consent withdrawal, to demonstrate compliance with consent obligations.
• Technical and usage logs: Retained for up to twelve (12) months in standard server logs; anonymised aggregate analytics data may be retained for longer periods.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical or analytical purposes.

kariky employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our principal security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kariky Platform, ensuring that login credentials, financial details, and personal data are never transmitted in plain text.
• Encryption at rest for sensitive stored data, including identity documents and financial account details, using industry-standard encryption algorithms.
• Segregated player funds held separately from kariky's operating accounts, ensuring that your account balance is not exposed to kariky's operational financial risks.
• Access controls limiting access to personal data to kariky staff members and contractors who have a legitimate operational need for that access, with role-based permissions enforced.
• Regular security assessments and vulnerability scanning of Platform infrastructure to identify and remediate potential weaknesses proactively.
• Secure data deletion procedures applied when personal data reaches the end of its retention period, ensuring that data cannot be recovered from decommissioned storage.

kariky uses cookies and similar tracking technologies to operate the Platform effectively, to remember your preferences, and to analyse how the Platform is used. A cookie is a small text file placed on your device by a web server. The categories of cookies used on the kariky Platform are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your language preferences, account display settings, and session state between visits. Disabling these cookies may reduce the convenience of your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players navigate the Platform. This data helps kariky identify popular features and areas for improvement. Analytics data is not linked to your personal identity.
• Security and fraud-prevention cookies: Used to detect suspicious login behaviour and help protect your account from unauthorised access attempts.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to delete cookies already stored on your device. Please note that disabling strictly necessary cookies will prevent you from logging into your kariky account.

As a kariky Player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your account username and a description of your request. kariky will respond within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data kariky holds about you, along with information about how and why it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update basic account details directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kariky's legal obligation to retain certain records for a minimum statutory period.
• Right to restriction: You have the right to request that kariky restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, machine-readable format, and to request that it be transferred directly to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on kariky's legitimate interests, or where the data is used for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

If kariky becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all associated data will be securely deleted (except where retention is required for legal or fraud-prevention purposes), and any deposited funds will be returned via the original payment method to the extent reasonably practicable.

If you believe that a minor has registered an account on the kariky Platform, please contact us immediately at [email protected] so that we can take prompt action. Protecting minors from accessing gambling services is a responsibility kariky takes with the utmost seriousness.

The kariky Platform may contain references to or integrations with third-party service providers — including game providers such as Pragmatic Play, Evolution Gaming, and NetEnt, and payment partners such as bKash and Nagad. While kariky works only with reputable partners, each third party operates under its own independently published privacy policy.

kariky is not responsible for the data practices of third-party providers. We encourage you to review the privacy notices of any third-party service with which you interact when using the kariky Platform, particularly your chosen payment provider, as their handling of your financial data is governed by their own terms.

kariky reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made to this Policy, we will notify registered Players by email to the address associated with their account, or by displaying a prominent notice on the Platform, prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was published. Your continued use of the Platform following any update to this Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes, you should stop using the Platform and may request account closure in accordance with kariky's Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which kariky processes your personal data, please contact our support team. All data-related enquiries are handled with confidentiality and will be acknowledged promptly.

Email: [email protected] (plain text — not a clickable link)

Our support team is available 24 hours a day, 7 days a week. When submitting a data-related request, please include your kariky username, the nature of your request, and any relevant details to help us locate and action your data efficiently. For access or erasure requests, we may require identity verification before processing in order to protect your account from unauthorised data requests by third parties.

For general platform guidance, our FAQ page provides answers to the most common questions from kariky Players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, and Khulna.