Karkiri Privacy Policy — Your Data, Protected

01 Who We Are

Karkiri operates the online gaming platform available at karkiri.net and through the karkiri mobile app. For the purposes of this Privacy Policy, karkiri is the data controller responsible for the personal data of all registered players and website visitors.

If you have any questions about how karkiri handles your personal data, you can contact the karkiri privacy team directly at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

02 Data We Collect

Karkiri collects personal data in two ways — information you provide directly when registering or using the platform, and information collected automatically as you interact with karkiri.

The following table summarises the categories of personal data karkiri collects:

Karkiri does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where this is strictly required by law or provided voluntarily by the player in the context of a responsible gaming request.

03 How We Use Your Data

Karkiri uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and secure your karkiri account, including verifying your identity and processing login requests.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate records of all financial transactions on your karkiri account.
• Identity Verification: To verify that you meet karkiri's eligibility requirements, including age verification and KYC checks required before withdrawal processing.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with your karkiri account.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the karkiri platform experience for all players.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the karkiri platform.
• Legal Compliance: To comply with applicable laws and regulations, including record-keeping obligations and responses to lawful requests from authorities.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.

Karkiri does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law.

04 Legal Basis for Processing

Karkiri processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to operate your karkiri account and deliver the services you have registered for, including processing deposits, withdrawals, and game play.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and record-keeping requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving the karkiri platform — where these interests are not overridden by your privacy rights.
• Consent: Where karkiri relies on your consent for a specific processing activity, such as sending promotional communications, you may withdraw that consent at any time by contacting [email protected].

05 Data Sharing

Karkiri does not sell, rent, or trade your personal data. Karkiri shares personal data with third parties only in the following limited circumstances:

• Payment Processors: Karkiri shares necessary financial data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable data protection obligations.
• Identity Verification Providers: Karkiri may use third-party KYC service providers to assist with identity verification. These providers process only the data necessary for verification and are contractually bound to handle it securely.
• Platform Technology Providers: Karkiri works with technology partners who provide infrastructure, hosting, and game content for the karkiri platform. These partners access data only as necessary to provide their services and are bound by data processing agreements.
• Legal Authorities: Karkiri will disclose personal data to law enforcement, regulatory bodies, or other authorities where required to do so by law or in response to a valid legal request.
• Business Transfers: In the event of a merger, acquisition, or sale of karkiri's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer in advance.

In all cases where karkiri shares data with third-party service providers, karkiri requires those providers to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared.

06 Payment Data

Karkiri takes the security of payment data particularly seriously. When you make a deposit or withdrawal on karkiri using bKash, Nagad, or Rocket, the following applies:

• Karkiri records your mobile banking account number and transaction reference for the purpose of processing and reconciling transactions.
• Full payment credentials — such as your mobile banking PIN — are never transmitted to or stored by karkiri. These are entered directly within your mobile banking app and are not visible to karkiri at any point.
• Transaction records are retained for the period required by applicable financial regulations.
• Karkiri uses your payment account information to verify that deposits and withdrawals are made to and from accounts registered in your own name, in line with karkiri's anti-money laundering obligations.

07 Cookies & Tracking

Karkiri uses cookies and similar technologies on the karkiri website and app. Cookies are small text files stored on your device that help the platform function correctly and remember your preferences.

Karkiri uses the following types of cookies:

• Essential Cookies: Required for the karkiri platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Preference Cookies: Used to remember your platform settings, such as language preferences and display options, so you don't have to reset them each time you visit karkiri.
• Analytics Cookies: Used to collect anonymised data about how players use the karkiri platform — such as which pages are visited most frequently and where players encounter errors. This data is used solely to improve the karkiri platform and is not linked to individual player identities.

Karkiri does not use advertising cookies, retargeting pixels, or any tracking technology that follows you across websites outside of karkiri.net. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use the karkiri platform.

08 Data Security

Karkiri implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data in transit between your device and karkiri's servers is encrypted using TLS (Transport Layer Security).
• Sensitive data at rest — including identity verification documents and financial records — is stored using AES-256 encryption.
• Access to personal data within karkiri's systems is restricted to staff who require it to perform their job functions, and is governed by role-based access controls.
• Karkiri conducts regular security reviews and vulnerability assessments of the karkiri platform.
• In the event of a data breach that poses a risk to player privacy, karkiri will notify affected players and relevant authorities within the timeframes required by applicable law.

While karkiri takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your karkiri account secure — use a strong, unique password and never share your login credentials with anyone.

09 Data Retention

Karkiri retains your personal data for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your karkiri account and for a period of up to 5 years after account closure, as required by financial regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with anti-money laundering record-keeping requirements.
• Identity Verification Documents: Retained for the period required by applicable KYC regulations, typically 5 years from the date of verification.
• Support Communications: Retained for up to 2 years from the date of the last communication, to assist with dispute resolution and quality assurance.
• Technical and Usage Data: Retained in anonymised or aggregated form for platform analytics purposes. Identifiable technical data is deleted within 12 months of collection.

When personal data is no longer required, karkiri securely deletes or anonymises it. If you request deletion of your data before the end of the applicable retention period, karkiri will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason for retention.

10 Your Rights

As a karkiri player, you have the following rights in relation to your personal data. To exercise any of these rights, contact karkiri at [email protected] with the subject line "Privacy Rights Request":

Karkiri will respond to all privacy rights requests within 30 days. Where a request is complex or involves a large volume of data, karkiri may extend this period by a further 30 days and will notify you of the extension. Karkiri will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive.

11 Children's Privacy

The karkiri platform is strictly for adults aged 18 and over. Karkiri does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the karkiri registration and KYC process.

If karkiri becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on karkiri, please contact [email protected] immediately.

12 Changes to This Policy

Karkiri may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or karkiri's data practices. When material changes are made, karkiri will notify registered players via email or an in-platform notification before the changes take effect.

The date of the most recent update is displayed at the top of this page. Continued use of the karkiri platform after the effective date of any changes constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the updated policy, you may request account closure by contacting [email protected].

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way karkiri handles your personal data, please contact the karkiri privacy team:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 5 business days for general enquiries; within 30 days for formal privacy rights requests
• Support Hours: 24 hours a day, 7 days a week

Karkiri is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with karkiri's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.