kikra Privacy Policy — Your Data, Your Rights

Privacy at a Glance

Key facts about how kikra handles your personal data.

1. Introduction

This Privacy Policy describes how kikra ("we", "us", "our") collects, uses, stores, shares and protects the personal information of individuals ("you", "your") who access or use the kikra website at https://kikra.bio and all associated services, features and content (collectively, the "Platform"). kikra is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.

By registering an account, depositing funds, or continuing to use the kikra platform after this policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information as described herein. If you do not agree, you must not use the kikra platform.

2. Information We Collect

kikra collects personal information in two ways: information you provide directly, and information collected automatically through your use of the platform. The categories of personal information we collect include the following.

• Registration information: your name, date of birth, mobile phone number (used as your primary account identifier and for bKash/Nagad/Rocket payment verification), and password (stored in hashed form — kikra never stores your plaintext password).
• Identity verification documents (KYC): copies of government-issued identity documents that you may be required to submit to verify your age (21+) or identity during a KYC check. These are securely stored and accessed only by authorised kikra compliance staff.
• Financial transaction data: records of deposits and withdrawals including the payment method used (bKash, Nagad, Rocket or Upay), transaction amounts, transaction timestamps and transaction reference numbers. kikra does not store your full mobile wallet PIN or any payment credentials directly.
• Usage and gameplay data: your betting history, game session logs, login timestamps, IP address at time of login, device type and operating system (collected for fraud detection and responsible gaming monitoring purposes).
• Communications data: the content of any messages you send to the kikra support team via email ([email protected]), including the subject matter of your enquiry, any attachments you provide, and the date and time of communication.

We do not knowingly collect sensitive personal data beyond what is required for age verification and KYC compliance. We do not collect biometric data, health data, political opinions, religious beliefs, or racial or ethnic origin data.

3. How We Use Your Information

kikra uses the personal information we collect for specific, defined purposes only. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account creation and management: to register your account, verify your identity and age, process your deposits and withdrawals, and maintain your account in good standing.
• Platform operation and improvement: to deliver the games, sports betting markets and other services you request, to monitor platform performance, and to develop new features and improve existing ones based on aggregate usage patterns.
• Fraud prevention and security: to detect, prevent and investigate fraudulent activity, money laundering, account takeover attempts, bonus abuse, and any other conduct that violates kikra's Terms and Conditions or applicable law.
• Responsible gaming: to monitor individual player activity for signs of problematic gambling behaviour, to apply responsible gaming tools (deposit limits, self-exclusion) when requested, and to comply with age verification obligations to ensure the platform is only used by adults aged 21 and above.
• Customer support: to respond to your enquiries, resolve complaints, and provide assistance with account, payment or gameplay issues. Support communications are retained for quality assurance and dispute resolution purposes.

4. Legal Basis for Processing

kikra processes your personal data under the following legal grounds.

• Contractual necessity: processing your registration data, transaction data and account activity data is necessary to perform the contract between you and kikra (i.e., your kikra account agreement and the Terms and Conditions).
• Legal obligation: processing identity verification (KYC) documents, transaction records and player activity logs is required to comply with applicable anti-money-laundering regulations, age verification requirements and other legal obligations.
• Legitimate interests: processing usage data for fraud detection, platform security, responsible gaming monitoring and platform improvement is carried out in pursuit of kikra's legitimate interests in operating a secure and compliant platform, provided that these interests are not overridden by your fundamental rights and freedoms.

5. Sharing Your Information

kikra does not sell, rent or trade your personal information to third parties for marketing or commercial purposes. We share your personal data only in the following limited circumstances.

• Service providers and processors: we share necessary data with third-party service providers who assist us in operating the platform, including payment processing partners (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi and others), identity verification services, and cloud infrastructure providers. All service providers are contractually bound to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards.
• Law enforcement and regulatory authorities: we will disclose your personal data to police, financial intelligence units, regulatory bodies or courts when we are legally required to do so by applicable law, court order, or lawful request from a government authority. We will notify you of such a request where we are legally permitted to do so.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or substantially all of kikra's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.
• Aggregated and anonymised data: we may share aggregated, anonymised statistical data about platform usage with analytics partners or publish it publicly (for example, platform traffic statistics). This data cannot be used to identify any individual player.

6. Payment Data and Mobile Wallet Transactions

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket or Upay, the payment transaction is processed directly by the relevant payment provider. kikra receives a transaction confirmation and reference number from the provider but does not receive or store your full mobile wallet PIN, one-time password (OTP), or any credentials that would allow kikra to initiate a transaction on your behalf. Your payment credentials remain exclusively between you and your mobile money provider.

Transaction records (amount, timestamp, method, reference number) are retained by kikra as part of your account history for a period consistent with our data retention policy (see section 7 below). These records may be reviewed by kikra compliance staff during a KYC review, a dispute investigation, or in response to a legal request.

7. Data Retention

kikra retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. The following general retention periods apply: active account data is retained for the lifetime of your account; transaction records and KYC documents are retained for a minimum of five years from the date of the relevant transaction or verification event, in accordance with standard anti-money-laundering record-keeping requirements; support communications are retained for two years from the date of the last message in the relevant conversation thread.

When your account is closed — whether at your request or by kikra — your personal data is not immediately deleted. We are required to retain transaction records, KYC documents and account history for the minimum retention periods described above. After those periods expire, data that is no longer required will be securely deleted or anonymised. You may request confirmation of how long your specific data will be retained by contacting [email protected].

8. Cookies and Tracking Technologies

kikra uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to remember your preferences, and to help us understand how the platform is being used. The following categories of cookies are used.

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during an active session, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect aggregated, anonymised information about how players navigate and use the platform — for example, which pages are visited most frequently and where users exit the platform. This data helps kikra improve the user experience. Analytics cookies do not track you across external websites.
• Preference cookies: used to remember your platform settings such as your selected language, display preferences and notification settings, so these are applied automatically on your next visit.

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies will prevent you from logging in and using the kikra platform. Deleting cookies does not delete your kikra account or any of your account data held on kikra's servers.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that kikra holds about you. To exercise any of these rights, contact kikra at [email protected]. We will respond to your request within 5 business days and aim to resolve it within 20 business days.

To exercise any of the rights above, please email [email protected] with the subject line "Data Rights Request" and include your registered mobile number so we can verify your identity before processing your request. We will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive.

10. Data Security

kikra implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the kikra platform, hashed password storage (your plaintext password is never stored), access controls that restrict kikra staff access to personal data on a strict need-to-know basis, and regular security reviews of platform infrastructure.

Whilst kikra takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. If you suspect that your kikra account has been accessed without your authorisation, contact [email protected] immediately. kikra will investigate all reported security incidents promptly.

11. Children and Minors

The kikra platform is strictly for adults aged 21 and above. kikra does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from an individual under 21, we will immediately delete that data, close the associated account, and void any transactions made through it. If you believe a minor has registered an account on the kikra platform, please notify us immediately at [email protected] so we can take action.

12. Changes to This Privacy Policy

kikra reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. Where a change is material — meaning it substantially affects how we collect or use your personal data — we will make reasonable efforts to notify registered players via their registered contact information, which may include an in-platform notification.

Your continued use of the kikra platform following the posting of any updated Privacy Policy constitutes your acceptance of the changes. If you disagree with any changes, you should stop using the platform and may request account closure by contacting [email protected].

13. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how kikra handles your personal data, please contact the kikra support team. We are available 24 hours a day, 7 days a week.