karikia Privacy Policy

1. Data Controller Information

karikia (referred to in this Privacy Policy as "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://karikia.net. karikia acts as the data controller in respect of the personal data that you provide or that is automatically generated when you visit and use our platform.

As data controller, karikia is responsible for determining the purposes and means by which your personal data is processed. We are committed to handling your data lawfully, fairly, and transparently, in accordance with applicable data protection principles and industry best practices for online gaming platforms serving the Bangladesh market.

If you have any questions about this Privacy Policy or about how karikia handles your personal data, please contact our privacy team at the details provided in the Contact & Privacy Enquiries section at the end of this document.

2. Information We Collect

karikia collects personal data through several channels: directly from you when you register an account, make a deposit, or contact our support team; automatically when you browse our platform; and occasionally from third-party identity and payment verification services. The categories of data we collect are described below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, or other Bangladesh cities), email address, and a chosen username.
• Identity verification (KYC) documents: Copies of government-issued photo ID (National Identity Card, passport, or driving licence), proof of address documents, and payment method verification documents.
• Financial data: Mobile financial service account details (e.g., bKash number, Nagad number, Rocket number, Upay number), bank account details (e.g., Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank), and card details (Visa, Mastercard) where applicable. Note: full card numbers are never stored on karikia servers — they are processed by PCI-DSS-compliant payment gateways.
• Communications: Messages and attachments sent to our customer support team via live chat or email, including any personal data you include in those communications.
• Responsible gaming preferences: Any deposit limits, session time settings, or self-exclusion requests you submit through your account dashboard.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on karikia.net, games played, bets placed, session start and end times, clickstream data, and referring URLs.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage data. See Section 5 (Cookies & Tracking Technologies) for full details.
• Geolocation data: General location inferred from your IP address (country and city level). We do not collect precise GPS location data.

2.3 Information from Third Parties

We may receive personal data about you from third-party service providers who assist us with identity verification, fraud detection, and payment processing. This data is used solely for the purposes described in this policy and is not combined with data from other sources beyond what is necessary for those purposes.

3. How We Use Your Data

karikia processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (operating your account), compliance with a legal obligation (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security), and your consent (marketing communications, where applicable).

We will never use your personal data for purposes that are incompatible with those listed above without providing you with prior notice and, where required, obtaining your consent.

4. Data Sharing & Third Parties

karikia does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the relevant purpose:

4.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay), card networks (Visa, Mastercard), and banking partners in Bangladesh. All payment partners are contractually obligated to handle your data securely and only for payment processing purposes.

4.2 Identity Verification Providers

We use third-party KYC and identity verification services to confirm the identity and age of our players. These providers process identity documents on our behalf under strict data processing agreements. Verified documents are not retained by these providers beyond what is necessary for the verification task.

4.3 Technology and Infrastructure Partners

karikia works with technology service providers — including cloud hosting providers, game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and customer support platform providers — who may process limited personal data on our behalf as data processors. All such providers are subject to data processing agreements that restrict how they may use your data.

4.4 Legal and Regulatory Disclosures

We may disclose your personal data to regulatory bodies, law enforcement agencies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will comply with all lawful requests from competent authorities.

5. Cookies & Tracking Technologies

karikia uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform, maintain your logged-in session, prevent fraud, and analyse how players interact with our website. By continuing to use karikia.net, you consent to our use of cookies as described in this section.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using core karikia features. The following browser-level controls are available in all major browsers: Chrome → Settings → Privacy and Security → Cookies; Firefox → Options → Privacy & Security; Safari → Preferences → Privacy; Edge → Settings → Cookies and site permissions.

Note that karikia does not use third-party advertising cookies or tracking pixels connected to ad networks. Your browsing behaviour on our platform is not shared with advertisers.

6. Data Retention

karikia retains personal data only for as long as necessary to fulfil the purposes for which it was originally collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of your account relationship with karikia, plus a minimum of 5 years following account closure, to comply with anti-money laundering obligations and other applicable legal requirements.
• Transaction records: Financial transaction records are retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping requirements.
• Customer support communications: Support chat logs and email correspondence are retained for up to 3 years from the date of the communication, unless a longer retention period is required in connection with an ongoing legal matter or dispute.
• Usage and analytics data: Anonymised analytics data may be retained for up to 3 years for platform improvement purposes. Raw usage logs associated with your account are retained for 12 months.
• Marketing preferences: Records of your marketing consent or opt-out decisions are retained for as long as your account exists, plus 3 years after closure.

When personal data is no longer required and there is no lawful basis for continued retention, it will be securely deleted or irreversibly anonymised. Deletion requests submitted by players are processed in accordance with the timeframes described in Section 8 (Your Privacy Rights).

7. Data Security Measures

karikia implements a multi-layered approach to information security designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following technical and organisational measures:

• Encryption in transit: All data transmitted between your device and karikia servers is encrypted using TLS 1.2 or higher, enforced across all platform endpoints.
• Encryption at rest: Sensitive personal data — including identity documents and payment references — is stored in encrypted form on our servers.
• Access controls: Personal data is accessible only to karikia staff who require it to perform their specific role. Access is governed by role-based access controls and is logged and audited regularly.
• Password security: User passwords are stored using industry-standard one-way cryptographic hashing. Even karikia staff cannot retrieve your password in plain text.
• Vulnerability management: Our technology infrastructure is subject to regular vulnerability assessments and security reviews. Critical vulnerabilities are remediated on a priority basis.
• Incident response: karikia maintains a documented data breach response procedure. In the event of a security incident that puts your personal data at significant risk, we will notify affected players without undue delay.

While karikia takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You also have an important role in keeping your account secure — use a strong, unique password, do not share your login credentials, and contact support immediately if you suspect any unauthorised activity on your account.

8. Your Privacy Rights

As a karikia player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Request" and include your registered username and a description of your request. We will respond within 30 days of receipt.

8.1 Right of Access

You have the right to request a copy of the personal data that karikia holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

8.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic account information (such as your email address or contact number) directly through your account settings. For changes to identity-related data, please contact support with supporting documentation.

8.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent is the basis for processing). Please note that karikia is subject to legal obligations — including anti-money laundering laws — that may require us to retain certain data for a defined period even after you close your account. In such cases, we will explain the specific legal basis for continued retention.

8.4 Right to Restrict Processing

In certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated — you may request that we restrict the processing of your personal data. We will continue to store the data but will not actively process it until the matter is resolved.

8.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to the processing of your personal data where karikia relies on legitimate interests as the lawful basis. You may also opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].

9. International Data Transfers

karikia operates a platform that serves players primarily located in Bangladesh. However, some of our technology infrastructure providers and game software partners may be located outside Bangladesh. Where your personal data is transferred to or processed in a country outside Bangladesh, karikia ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required by applicable law.

Safeguards we rely on for international transfers include contractual clauses in data processing agreements with our technology partners, requiring them to implement security standards and data protection obligations consistent with this Privacy Policy. Where a third-party provider is located in a country recognised as providing an adequate level of data protection, we rely on that adequacy determination.

In all cases, we transfer only the minimum data necessary for the third party to perform its specific function, and we prohibit those parties from using transferred data for any purpose other than performing services on our behalf.

10. Changes to This Policy

karikia reserves the right to update or amend this Privacy Policy at any time. We will publish the updated version at https://karikia.net/privacy-policy, with a revised "Last updated" date at the top of the document. For material changes — those that significantly affect how we handle your personal data or your privacy rights — we will notify you by email to your registered address or via an in-platform notification before the changes take effect.

Your continued use of the karikia platform after a Privacy Policy update constitutes your acknowledgement of the updated policy. If you do not agree with the updated terms, you should stop using the platform and request account closure by contacting [email protected].

We recommend reviewing this Privacy Policy periodically. Changes to applicable data protection law or significant updates to our platform or data practices may trigger policy amendments between scheduled reviews.

11. Contact & Privacy Enquiries

If you have any questions, concerns, or requests related to this Privacy Policy or to how karikia handles your personal data, please do not hesitate to contact us. Our privacy team is available to assist you through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related questions, or "Data Request" for formal rights requests.
• Live Chat: Available 24/7 inside your registered karikia account dashboard. Our support agents can handle general privacy questions and escalate formal requests to the appropriate team.
• Response time: Within 2–6 hours for general support enquiries (BST, UTC+6); within 5 business days for formal privacy rights requests.

karikia is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority. Details of the appropriate authority will be provided upon request.