Last Updated: January 2
026
1 Introduction
krakya ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or register on the krakya platform, available at krakya.biz. This Privacy Policy sets out a transparent account of how krakya collects, uses, stores, shares, and safeguards the personal information you provide to us, or that we collect automatically, when you use our website and services.
This Privacy Policy applies to all Players, visitors, and prospective registrants who interact with the krakya platform, including individuals accessing the site from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh.
By registering an Account, completing a deposit, placing a bet, or otherwise using the krakya platform in any capacity, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and may request Account closure by contacting krakya support.
Policy Scope: This Privacy Policy should be read alongside the krakya
Terms & Conditions and
Responsible Gaming policy, both of which form part of the overall agreement between you and krakya.
2 Data We Collect
krakya collects personal data that is necessary for the lawful and efficient operation of the platform. The categories of personal data we collect include, but are not limited to, the following:
2.1 Identity & Registration Data
- Full legal name
- Date of birth (for age verification purposes)
- National ID number or passport number (where submitted for KYC verification)
- Registered email address
- Username and encrypted password
- Mobile phone number
2.2 Address & Location Data
- Residential address, including city and postcode
- Country of residence
- IP address (used to determine approximate geolocation and to enforce territorial access restrictions)
2.3 Financial & Payment Data
- Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
- Mobile wallet number or partial card number (as applicable)
- Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions
- Account Balance at any given time
2.4 Gaming & Betting Activity Data
- Bet and wager history across all games and betting markets
- Game session data, including session start/end times and duration
- Responsible gaming settings, including deposit limits and self-exclusion status
- Bonus claims, wagering progress, and promotional participation records
2.5 Technical & Usage Data
- Device type, operating system, and browser type and version
- Pages visited, clicks, and navigation paths within the krakya platform
- Referring URL (the page from which you arrived at krakya.biz)
- Cookie identifiers and session tokens
- Time-stamped access logs (stored in Bangladesh Standard Time, UTC+6)
2.6 Communication Data
- Support ticket contents, chat transcripts, and email correspondence with krakya support
- Responses to surveys, feedback forms, and promotional communications (where you have opted in)
Sensitive Data: krakya does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data. Where identity documents are submitted for KYC purposes, they are processed solely for age and identity verification and are stored in encrypted form with access strictly limited to authorised compliance personnel.
3 How We Collect Data
krakya collects personal data through the following channels:
- Registration Form: When you create a krakya Account, you provide identity, contact, and date-of-birth information directly through the registration form.
- KYC Verification: When krakya requests identity verification, you may submit copies of government-issued identification documents via the Account verification portal.
- Deposit & Withdrawal Transactions: Financial data is collected each time you initiate a deposit or withdrawal through a supported payment method such as bKash, Nagad, Rocket, or Upay.
- Platform Usage: Technical and usage data is collected automatically via server logs, cookies, and analytics tools as you navigate and interact with the krakya platform.
- Support Interactions: Communication data is collected whenever you contact krakya through the support email or any other available support channel.
- Responsible Gaming Tools: When you configure deposit limits, session reminders, or self-exclusion settings in your Account, those preferences are recorded and stored as part of your Account data.
No Third-Party Data Purchases: krakya does not purchase, rent, or acquire personal data about you from third-party data brokers or marketing list providers. All personal data held by krakya is collected directly from you or generated through your use of the platform.
4 Purpose & Legal Basis for Processing
krakya processes your personal data only for defined, legitimate purposes. The table below summarises the primary purposes for which your data is processed and the corresponding legal basis for each processing activity:
| Purpose |
Data Categories Used |
Legal Basis |
| Account registration and management |
Identity, contact, login credentials |
Performance of contract |
| Age verification and KYC compliance |
Identity, date of birth, ID documents |
Legal obligation |
| Processing deposits and withdrawals |
Financial, payment method data |
Performance of contract |
| Fraud prevention and security monitoring |
Technical, financial, identity data |
Legitimate interests |
| Responsible gaming compliance |
Gaming activity, responsible gaming settings |
Legal obligation / legitimate interests |
| Customer support and dispute resolution |
Communication, account, transaction data |
Performance of contract |
| Platform analytics and improvement |
Technical, usage data |
Legitimate interests |
| Promotional communications (opt-in only) |
Contact, gaming activity data |
Consent |
krakya will not process your personal data for purposes that are incompatible with those listed above without first obtaining your consent or establishing a separate lawful basis for that processing activity.
5 Data Retention
krakya retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or operational obligations. The following general retention principles apply:
- Active Account Data: Personal data associated with an active krakya Account is retained for the duration of the Account and for a period of at least five (5) years following Account closure, in accordance with anti-money laundering record-keeping obligations.
- Transaction Records: Financial transaction records, including deposit history, withdrawal records, and bet history, are retained for a minimum of five (5) years from the date of each transaction.
- KYC Documentation: Identity verification documents are retained for the period required by applicable law, typically five (5) years from the date of verification or Account closure, whichever is later.
- Support & Communication Records: Email correspondence and support ticket records are retained for a period of two (2) years from the date of the last interaction, unless the matter relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved.
- Technical & Usage Logs: Server logs and session data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.
- Marketing Opt-In Records: Records of your marketing consent are retained for as long as you remain subscribed to krakya promotional communications, plus one (1) year following unsubscription to evidence the lawful basis for any communications sent during the opt-in period.
When personal data is no longer required for any of the above purposes, krakya will securely delete or anonymise it in accordance with our internal data destruction procedures.
6 Sharing Your Data
krakya does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients where it is necessary and proportionate to do so:
- Payment Processors: Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and card network operators (Visa, Mastercard) solely to the extent required to process your deposits and withdrawals.
- Game Providers: Where required to enable gameplay, technical session data may be shared with licensed Game Providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. Game Providers receive only the minimum data necessary to authenticate your session and record game results.
- Fraud Prevention & Security Partners: Anonymised or pseudonymised technical and usage data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the krakya platform and its Players.
- Legal & Regulatory Authorities: krakya may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory directive. krakya will not notify you of such disclosures where legally prohibited from doing so.
- Professional Advisers: In the context of legal proceedings, audits, or business transactions, personal data may be disclosed to legal counsel, auditors, or other professional advisers bound by confidentiality obligations.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to recipients located outside Bangladesh, krakya implements appropriate safeguards to ensure that your data receives an equivalent level of protection, including contractual data protection clauses and security certification requirements imposed on all third-party data processors.
7 Cookies & Tracking Technologies
krakya uses cookies and similar tracking technologies to operate the platform effectively, enhance the user experience, and gather aggregated analytics about how Players interact with the site. The following types of cookies are used:
- Strictly Necessary Cookies: These cookies are essential to enable core platform functions such as maintaining your login session, storing your Account preferences, and ensuring that security controls operate correctly. These cookies cannot be disabled without materially impairing platform functionality.
- Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors navigate the krakya platform, including which pages are visited most frequently and whether error messages are encountered. This data is used to improve platform performance and user experience.
- Functional Cookies: These cookies allow the platform to remember personalised settings such as your preferred language, currency display (BDT / ৳), and responsible gaming notification preferences.
- Targeting & Marketing Cookies: Where you have consented to receive marketing communications, cookies may be used to record your promotional interactions and to prevent you from being shown the same promotional message more than once.
You may manage or withdraw your cookie consent at any time through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to log in or use certain features of the krakya platform. Detailed instructions for managing cookies in common browsers are available through each browser's help documentation.
No Fingerprinting: krakya does not use device fingerprinting or persistent cross-site tracking technologies. Technical data collected through cookies is used solely in connection with your krakya Account and platform activity.
8 Data Security
krakya implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the krakya platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted during transmission.
- Encrypted Password Storage: User passwords are never stored in plain text. krakya uses industry-standard one-way hashing algorithms with salting to store password data, meaning that even krakya personnel cannot retrieve your password in its original form.
- Access Controls: Access to personal data held by krakya is restricted on a strict need-to-know basis. Personnel are granted access only to the categories of data required to perform their specific job function. All access is logged and subject to periodic review.
- Intrusion Detection & Monitoring: krakya's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous transaction patterns. Automated alerts are triggered when security thresholds are breached.
- Regular Security Audits: The krakya platform and its data handling procedures are subject to periodic internal and external security audits to identify and remediate potential vulnerabilities before they can be exploited.
- Data Minimisation: krakya collects and retains only the minimum personal data necessary to operate the platform and fulfil its legal obligations. Data that is no longer required is securely deleted.
Security Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, krakya will notify affected Players without undue delay and will take immediate remedial action to contain the breach and prevent further unauthorised access.
While krakya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying krakya support immediately if you suspect that your Account has been compromised.
9 Your Rights
As a data subject, you have the following rights with respect to the personal data that krakya holds about you. To exercise any of these rights, please contact krakya support at [email protected] with a clear description of your request:
- Right of Access: You have the right to request a copy of the personal data that krakya holds about you, along with information about how that data is processed. krakya will respond to verified access requests within 30 days.
- Right to Rectification: If any personal data held by krakya is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. Requests to update registered name, address, or payment information are subject to identity verification.
- Right to Erasure: You may request that krakya delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. This right is subject to krakya's legal obligations to retain certain data for anti-money laundering and regulatory purposes.
- Right to Restriction of Processing: You may request that krakya restrict the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is pending resolution.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to krakya in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where krakya relies on legitimate interests as the legal basis for processing, including profiling for fraud prevention purposes. krakya will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where krakya processes your data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Identity Verification Required: To protect the security of Player data, krakya requires identity verification before processing any data subject rights request. krakya will not fulfil a data access, rectification, or erasure request from an unverified requestor. Verification requests should be submitted to
[email protected] with the subject line "Data Rights Request".
10 Children's Privacy
The krakya platform is strictly intended for individuals who are 18 years of age or older. krakya does not knowingly collect, process, or store personal data from individuals under the age of 18. If krakya discovers that personal data has been collected from an individual under 18, that Account will be immediately closed, any Balance will be forfeited in accordance with the krakya Terms & Conditions, and all associated personal data will be deleted without undue delay.
Parents and guardians who believe that a minor may have registered an Account on krakya or may have been exposed to krakya content are encouraged to contact krakya support immediately at [email protected]. krakya cooperates fully with parental requests to investigate and close underage Accounts.
18+ Strictly Enforced: krakya operates a mandatory age verification process at Account registration. Players may be required to submit government-issued identity documentation to confirm that they are aged 18 or above before being permitted to deposit funds or access real-money gaming features.
11 Third-Party Services
The krakya platform integrates with licensed third-party service providers to deliver its gaming content, payment processing, and platform infrastructure. krakya is not responsible for the privacy practices of these third parties beyond the data-sharing arrangements described in this Privacy Policy. The following categories of third-party services are used:
- Game Software Providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe each operate under their own privacy frameworks applicable to the game sessions they power. krakya shares only the minimum data necessary with Game Providers to authenticate your gaming session.
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard each process payment data under their own terms and privacy policies applicable to their respective services. krakya is not party to any data processing activities carried out by payment providers beyond the execution of your requested transaction.
- Platform Infrastructure: krakya uses cloud hosting and content delivery infrastructure. Data processed on these platforms is subject to contractual data protection obligations that require equivalent levels of security to those applied by krakya directly.
krakya does not permit third-party service providers to use personal data shared by krakya for any purpose other than the specific service they are contracted to provide. All third-party data processors are required to maintain appropriate technical and organisational security measures consistent with the standards applied by krakya.
12 Marketing Communications
krakya may send promotional emails, SMS notifications, or in-platform messages to Players who have explicitly opted in to receive marketing communications at the time of Account registration or at any subsequent point through their Account settings. Marketing communications may include information about:
- New games and game provider launches available on the krakya platform
- Seasonal promotions and bonus offers (e.g., Eid, Pohela Boishakh, IPL season, BPL season specials)
- Deposit match bonuses and free bet promotions
- Platform updates, new payment method availability, and feature announcements
You may unsubscribe from krakya marketing communications at any time by clicking the unsubscribe link in any marketing email, by adjusting your notification preferences in your Account settings, or by submitting an unsubscribe request to [email protected]. Unsubscription requests will be processed within five (5) business days. Opting out of marketing communications does not affect the delivery of essential service communications such as transaction confirmations, security alerts, and Account notifications.
No Unsolicited Marketing: krakya does not send promotional communications to Players who have not explicitly opted in. krakya does not purchase email lists or engage in unsolicited bulk email campaigns.
13 Policy Updates
krakya reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this Policy, krakya will notify registered Players via email or through a prominent in-platform notice prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this Privacy Policy page. The version of the Privacy Policy published on krakya.biz/privacy-policy at any given time is the current operative version. Continued use of the krakya platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.
Where changes require your consent (for example, where krakya proposes to process your data for a new purpose that requires consent as its legal basis), krakya will obtain that consent separately before commencing the new processing activity.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that krakya holds about you, please contact the krakya privacy team through the following channel:
- Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate
- Response Time: krakya aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days of receipt
- Language: All privacy-related correspondence is handled in English
For responsible gaming enquiries, self-exclusion requests, or deposit limit adjustments, please visit the Responsible Gaming page for the full range of available tools and support resources.
This Privacy Policy was last reviewed and updated in January 2026. The version published on krakya.biz/privacy-policy is the current binding version. krakya reserves the right to amend this document at any time in accordance with Section 13 above.