krekay Privacy Policy
Your personal information deserves the highest level of care. This Privacy Policy explains exactly what data krekay collects, why we collect it, how it is used, and the rights you hold as a player based in Bangladesh. We are committed to full transparency.
Privacy at a Glance
Before diving into the full policy, here is a concise overview of the six core principles that guide how krekay handles your personal data as a Bangladesh-based player.
Minimal Data Collection
krekay collects only the personal information that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not gather data we do not need.
Purpose-Driven Use
Every piece of data collected by krekay is used for a clearly defined purpose — operating your account, processing bKash or Nagad transactions, preventing fraud, and meeting legal obligations. Your data is never repurposed without your knowledge.
Bank-Grade Encryption
All data transmitted between your device and krekay's servers is protected with 256-bit SSL/TLS encryption. Sensitive fields such as payment details and identity documents are encrypted at rest using industry-standard protocols.
Controlled Data Sharing
krekay does not sell, rent, or trade your personal data to marketers or unrelated third parties. Data is shared only with trusted service partners — such as payment processors and fraud detection providers — under strict confidentiality obligations.
Your Rights Are Respected
As a krekay player, you have the right to access, correct, or request deletion of your personal data. You may also object to certain types of processing or withdraw consent for marketing communications at any time.
Defined Retention Periods
krekay retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable legal, regulatory, or fraud-prevention obligations. Data that is no longer required is securely deleted or anonymised.
1. Information We Collect
Transparency first: krekay collects personal data only through lawful means and for legitimate, stated purposes. The following describes every category of data we may hold about you as a registered krekay player in Bangladesh.
1.1 Registration & Identity Data
When you create a krekay account, we collect the information you provide directly, including your full legal name, date of birth, email address, Bangladesh mobile phone number, and the password you choose. This information is required to establish your account identity, verify that you meet the 18+ age requirement, and facilitate secure login.
1.2 Know Your Customer (KYC) Documents
As part of our identity verification process, krekay may request copies of government-issued identification documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate. We may also request a selfie alongside your NID, as well as proof that a payment method (such as your bKash or Nagad wallet) is registered in your name. KYC documents are processed securely and are used exclusively for identity verification and fraud prevention.
1.3 Financial & Transaction Data
krekay records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method identifiers (such as the last four digits of a card or the registered mobile number of a bKash wallet), transaction timestamps, and currency amounts in Bangladeshi Taka (৳ / BDT). Full payment credentials such as card numbers and mobile banking PINs are never stored by krekay — these are handled directly by your payment provider.
1.4 Gameplay & Betting Data
krekay records your activity on the platform, including games played, bets placed, bet outcomes, session durations, and your use of responsible gaming tools. This data is used to provide the Services, detect problem gambling patterns, honour bonus terms, and investigate disputes.
1.5 Technical & Device Data
When you access krekay via a web browser or mobile device, we automatically collect certain technical data including your IP address, device type, operating system, browser version, screen resolution, and referring URL. This information helps us optimise the platform for Bangladeshi players, detect suspicious login activity, and troubleshoot technical issues.
1.6 Communications Data
If you contact krekay's customer support team — by email, live chat, or any other channel — we retain records of that correspondence. This allows us to track ongoing issues, maintain a history of resolutions, and improve our support quality for all players.
| Category | Collected At |
|---|---|
| Identity & Contact | Registration |
| KYC Documents | Verification |
| Financial Records | Each transaction |
| Gameplay Logs | During play |
| Device & IP Data | Each session |
| Support History | On contact |
| Marketing Prefs | On opt-in |
krekay never collects sensitive biometric data beyond the selfie-with-ID required for KYC, and never stores full payment credentials. Financial data is tokenised at the point of entry by your payment provider.
2. How We Use Your Data
krekay processes your personal data only for lawful, specific, and transparent purposes. The table below sets out each processing activity, its legal basis, and the data categories involved. We do not use your data for any purpose incompatible with those originally stated at the time of collection.
| Purpose of Processing | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, contact, device data | Contractual necessity |
| Age & identity verification (KYC) | KYC documents, identity data | Legal obligation |
| Processing deposits & withdrawals | Financial, identity data | Contractual necessity |
| Providing games & betting services | Gameplay logs, financial data | Contractual necessity |
| Fraud prevention & security monitoring | Device, IP, transaction, gameplay data | Legitimate interest |
| Responsible gaming tools | Gameplay logs, session data | Legal obligation / legitimate interest |
| Customer support | Communications, identity data | Contractual necessity |
| Promotional communications | Contact details, preferences | Consent (opt-in only) |
| Platform analytics & improvement | Technical, device, gameplay data | Legitimate interest |
| Legal & regulatory compliance | All categories as required | Legal obligation |
2.1 Marketing Communications
krekay may send you promotional messages about bonuses, new games, BPL cricket betting specials, seasonal promotions (such as Eid or Pohela Boishakh offers), and other krekay services by email or SMS. Marketing communications are sent only to players who have explicitly opted in. You may withdraw your consent and unsubscribe at any time by contacting [email protected] or using the preference centre in your account settings. Withdrawing marketing consent does not affect your ability to use krekay Services.
2.2 Automated Decision-Making
krekay uses automated systems to detect fraud, flag unusual betting patterns, and enforce responsible gaming limits. In some circumstances, these systems may automatically flag or temporarily restrict an account pending human review. If your account is affected by an automated decision, you have the right to request human review of that decision by contacting our support team.
3. Data Sharing & Third Parties
krekay does not sell your personal data. We do not sell, rent, or trade your personal information to advertisers, data brokers, or any unrelated third party. Data is shared externally only in the limited circumstances described below, and only with parties bound by strict confidentiality and data security obligations.
3.1 Payment Processors
To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, krekay shares the minimum necessary data — typically your name, registered mobile number or account identifier, and transaction amount — with the relevant payment service provider. These providers process this data under their own privacy policies and are independently responsible for the security of payment transactions.
3.2 Identity Verification Partners
krekay may engage third-party KYC and identity verification specialists to assist with processing identity documents. These providers act under strict contractual data processing agreements and are permitted to use your data only for the purpose of completing identity checks on krekay's behalf.
3.3 Fraud Prevention & Security Services
krekay shares certain technical data — such as IP addresses, device fingerprints, and transaction patterns — with fraud prevention and cybersecurity service providers. This sharing is in our legitimate interest and yours, as it protects the integrity of the krekay platform and the funds of all players.
3.4 Game Providers
To deliver casino games and sports betting content, krekay works with game providers and platform suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers necessary to operate their games within the krekay platform. No financial or full identity data is shared with game providers beyond what is technically necessary.
3.5 Legal & Regulatory Disclosure
krekay may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so — for example, in response to a court order, fraud investigation, or anti-money-laundering (AML) inquiry. In such circumstances, krekay will disclose only the data that is strictly required by the legal demand.
3.6 Business Transfers
In the event that krekay undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by krekay may be transferred to the acquiring entity as part of that transaction. Any such transfer will be conducted in a manner consistent with this Privacy Policy, and affected players will be notified before their data is subject to a materially different privacy policy.
5. Data Security Measures
krekay takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, krekay's security framework is designed to meet the highest practical standards available.
5.1 Encryption in Transit
All data transmitted between your device and krekay's servers is protected using 256-bit SSL/TLS encryption. This applies to every interaction on the platform — account login, deposits and withdrawals via bKash and Nagad, game activity, and support communications. The krekay platform enforces HTTPS for all connections and does not permit unencrypted HTTP access to any page containing personal or financial data.
5.2 Encryption at Rest
Sensitive data stored in krekay's systems — including KYC documents, identity information, and financial records — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, with role-based access controls applied at every level of the infrastructure stack.
5.3 Access Controls
krekay staff access to player data is governed by the principle of least privilege — employees are granted access only to the data they need to perform their specific job function. Access logs are maintained and reviewed regularly. Staff with access to sensitive player data undergo security training and are bound by confidentiality obligations.
5.4 Fraud Monitoring
krekay operates continuous automated fraud monitoring across account activity, transaction patterns, and login behaviour. Anomalous activity — such as logins from unfamiliar locations, multiple failed authentication attempts, or unusual withdrawal sequences — triggers security alerts that are reviewed by our risk team. Players may be contacted for additional verification in such circumstances.
5.5 Data Breach Response
In the unlikely event of a data breach affecting your personal information, krekay will take immediate steps to contain the breach, assess its scope, and — where required — notify affected players and relevant authorities without undue delay. krekay maintains an incident response plan that is reviewed and tested periodically by our security team.
5.6 Your Role in Security
Account security is a shared responsibility. krekay strongly encourages you to use a unique, strong password for your krekay account, to enable two-factor authentication where available, and to never share your login credentials with any other person. krekay will never ask you for your password by email or phone. If you receive a communication claiming to be from krekay and asking for your password, please report it immediately to [email protected].
| Data in transit | 256-bit SSL/TLS |
| Data at rest | AES-256 encryption |
| Authentication | 2FA available |
| Access control | Role-based (least privilege) |
| Fraud detection | 24/7 automated monitoring |
| Incident response | Documented & tested plan |
| Staff training | Regular security training |
krekay's security infrastructure is regularly reviewed to address emerging threats. If you suspect your account has been compromised, contact [email protected] immediately for a security review and password reset.
6. Your Privacy Rights
As a krekay player, you have a number of rights in relation to the personal data we hold about you. krekay is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, contact our data team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address for identity verification.
Right of Access
You may request a copy of all personal data krekay holds about you. We will provide this in a structured, readable format within 30 days of a verified request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Updates to core identity data may require re-verification of your KYC documents.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that legal, financial, and fraud-prevention obligations may require certain records to be retained even after account closure.
Right to Restrict Processing
You may ask krekay to restrict how your data is used while a dispute or erasure request is being resolved. During a restriction, we may retain your data but will not actively process it beyond storage.
Right to Data Portability
Where data has been provided by you and processed by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
Right to Object
You may object to data processing carried out on the basis of legitimate interest — including profiling for marketing purposes. You may opt out of marketing communications at any time through your account settings.
Rights re: Automated Decisions
Where an automated system makes a significant decision about your account — such as a fraud-based restriction — you have the right to request human review of that decision by our compliance team.
Right to Withdraw Consent
For any processing based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before you withdrew consent.
6.1 Response Timeframe
krekay will acknowledge your privacy rights request within 5 business days and aim to complete the request within 30 calendar days. In cases of complex or high-volume requests, this period may be extended by a further 30 days, and you will be notified of the extension and reason in advance.
6.2 Identity Verification for Requests
To protect your privacy, krekay will verify your identity before processing any data rights request. This typically involves confirming your registered email address, account username, and in some cases, a piece of identity documentation. We will not act on a request if we cannot verify that it comes from the account holder.
7. Data Retention Policy
krekay retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory , or fraud-prevention obligations. The following table outlines our standard retention periods by data category.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account & identity data | Duration of account + 5 years | Legal obligation, fraud prevention |
| KYC documents | Duration of account + 5 years | Regulatory compliance, AML obligations |
| Financial & transaction records | 7 years from transaction date | Financial regulatory requirements |
| Gameplay & betting logs | 3 years from last activity | Dispute resolution, responsible gaming |
| Support communications | 3 years from last interaction | Service quality, dispute resolution |
| Device & technical logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing preferences | Until consent withdrawn + 1 year | Proof of consent, compliance |
| Closed / banned account data | 5 years from closure | Fraud prevention, legal obligation |
7.1 Secure Deletion
When personal data reaches the end of its retention period and no further legal basis exists for its storage, krekay securely deletes or anonymises it in accordance with industry best practices. Deletion processes are documented and audited to ensure compliance. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.
7.2 Account Closure
If you choose to close your krekay account, your active account data will be deactivated immediately. However, certain records — particularly KYC documents, transaction histories, and communications related to disputes or responsible gaming interventions — will be retained for the periods specified in the table above in order to satisfy our legal and regulatory obligations. You will be notified of this at the time of account closure.
7.3 Self-Exclusion Records
If you have requested a self-exclusion from krekay under our Responsible Gaming policy, your self-exclusion record will be retained for a minimum of 5 years following the end of the exclusion period. This retention is in place to protect you: it prevents krekay from inadvertently re-activating an account or accepting a new registration from a player who has previously self-excluded.
8. Policy Updates & Contact
8.1 Changes to This Privacy Policy
krekay may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, applicable laws, or the recommendations of data protection authorities. When we make a material change to this policy, we will notify registered players by email and display a prominent notice on the krekay platform for a period of at least 14 days before the change takes effect.
The effective date at the top of this page indicates when the current version of the Privacy Policy was last updated. We encourage you to review this page periodically so that you remain informed about how krekay protects your personal data. Your continued use of krekay after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms.
8.2 Children and Minors
krekay is an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player under 18 has registered an account, we will immediately close that account, delete the associated personal data, and reverse any transactions where possible. If you believe a minor has registered with krekay, please notify us at [email protected] without delay.
8.3 International Data Transfers
krekay primarily serves players based in Bangladesh. However, some of our service providers — including game platform suppliers and fraud prevention specialists — may process data in locations outside Bangladesh. Where such transfers occur, krekay ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy.
8.4 Contacting krekay About Privacy
If you have any questions, concerns, or requests related to this Privacy Policy or the way krekay handles your personal data, please contact our dedicated privacy team. We are committed to responding to all genuine privacy inquiries promptly and in good faith.
You may reach us at: [email protected] — please use the subject line "Privacy Inquiry" and include your registered account email so we can identify and assist you efficiently.
krekay's support team operates during Bangladesh Standard Time (BST, UTC+6) business hours, Monday through Sunday. We aim to send an initial acknowledgment within 1 business day and to resolve all privacy matters within 30 calendar days.
Privacy contact email:
[email protected]
Subject: "Privacy Inquiry"
Response within 1 business day (BST, UTC+6)
Policy last updated: January 2026
Next scheduled review: January 2027
Material changes will be communicated to all registered players by email at least 14 days in advance.
18+ platform only. krekay does not knowingly collect data from players under 18. If you suspect underage access, contact [email protected] immediately. We take underage gambling prevention seriously and act on all reports without delay.
Related Policies
This Privacy Policy should be read alongside krekay's other governing documents for a complete picture of your rights and obligations as a player.
Ready to Play at krekay?
Now that you understand how krekay protects your data, explore our full range of casino games, live cricket betting, and premium slots — all designed for Bangladesh players with fast bKash and Nagad payouts.