At kekiya, protecting the personal data of every player is a fundamental obligation — not an afterthought. This Privacy Policy sets out precisely what data we collect, how we use it, who we share it with, and what rights you hold over your own information when using the kekiya platform in Bangladesh.
This Privacy Policy ("Policy") applies to all personal data collected and processed by kekiya ("we", "us", "our") in connection with the operation of the online casino and sports betting platform accessible at https://kekiya.club (the "Platform"). It explains in plain, accessible English what personal information kekiya collects from players located in Bangladesh, why we collect it, how we use it, and the rights available to you regarding your own data.
By registering an account, accessing any game or betting market, initiating a deposit or withdrawal transaction, or otherwise using any feature of the kekiya Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms an integral part of the kekiya Terms and Conditions and should be read alongside that document.
kekiya is committed to handling all personal data with the highest standards of care, in accordance with applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. We do not sell, rent, or trade your personal data to third parties for commercial marketing purposes under any circumstances.
kekiya collects only the personal data that is necessary for the operation of the Platform, fulfilment of legal obligations, and delivery of a safe, personalised gaming experience to players across Bangladesh. The categories of personal data we collect are described in the table below.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID / passport / driving licence number, NID scan or photograph | Age verification, KYC compliance, account security |
| Contact Data | Mobile number (Bangladeshi), email address, residential address (city / district) | Account communication, OTP delivery, support correspondence |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, Visa / Mastercard card metadata (last 4 digits, expiry), transaction amounts and timestamps | Payment processing, withdrawal verification, AML compliance |
| Technical Data | IP address, device type and model, operating system, browser type and version, session identifiers, time zone (Bangladesh Standard Time) | Platform security, fraud detection, geographic restriction enforcement |
| Usage Data | Games played, bets placed, bet amounts, win/loss history, session duration, page navigation paths | Responsible gaming monitoring, personalisation, platform improvement |
| Communications Data | Support chat logs, email correspondence with kekiya, feedback submissions | Customer service, dispute resolution, quality improvement |
| Preference Data | Responsible gaming settings (deposit limits, time-out periods, self-exclusion status), notification preferences, language settings | Delivering your chosen account configuration, responsible gaming enforcement |
kekiya does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs used for KYC), or health data, except where a player voluntarily discloses health-related information in connection with a responsible gaming self-exclusion request. Such disclosures are treated with the highest level of confidentiality and processed solely for the purpose of activating the requested protective measure.
kekiya collects personal data through several distinct channels depending on the nature of the data and the context in which it arises:
The majority of personal data kekiya holds is provided directly by you during the account registration process, identity verification submissions, deposit and withdrawal transactions, support enquiries, and responsible gaming tool activations. This is data you knowingly and voluntarily provide to kekiya in order to use the Platform.
When you access and use the kekiya Platform, certain technical and usage data is collected automatically through the operation of the Platform itself. This includes your IP address, device identifiers, session logs, game activity records, and navigation data. This automated collection occurs through server logs, session management systems, and the game platform software supplied by our game studio partners.
kekiya may receive limited personal data about you from trusted third-party sources in the following circumstances:
kekiya uses cookies and similar tracking technologies to maintain session state, remember your preferences, and gather aggregated analytics data about Platform usage. A full description of kekiya's use of cookies is provided in Section 7 of this Policy.
kekiya processes your personal data only where a valid legal basis exists for doing so. The legal bases on which kekiya relies when processing different categories of personal data are as follows:
kekiya uses the personal data it collects for the following specific purposes. We do not use your personal data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate legal basis:
kekiya does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the purpose identified:
kekiya engages carefully selected third-party service providers to assist in operating the Platform. These providers act as data processors on kekiya's behalf and are bound by strict contractual data protection obligations. Categories of service providers who may receive your personal data include:
kekiya may disclose your personal data to competent authorities, law enforcement agencies, courts, or regulators where required to do so by applicable law, court order, or regulatory directive. In all such cases, kekiya will disclose only the minimum data required to comply with the lawful request and will, where legally permissible, notify you of such disclosure.
In the event that kekiya undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before your data is transferred, and you will retain your data subject rights throughout any such process.
kekiya uses cookies and similar client-side tracking technologies to ensure the Platform functions correctly, maintain the security of your session, remember your account preferences, and gather anonymised analytics data about how players use the Platform. The cookies used by kekiya fall into the following categories:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintain your authenticated session, enforce security controls, prevent cross-site request forgery (CSRF) | Session | No — required for Platform to function |
| Functional / Preference | Remember your language preferences, notification settings, and responsible gaming configurations | 30 days | Yes — disabling may reduce personalisation |
| Analytics | Collect anonymised data about page views, session duration, and feature usage to help improve the Platform | 90 days | Yes — opt out via account preferences |
| Security / Fraud Detection | Detect suspicious device fingerprints, identify VPN or proxy usage, flag anomalous login patterns | Session / 7 days | No — required for Platform security |
kekiya does not use third-party advertising cookies or permit external ad networks to place tracking cookies on the kekiya Platform. You may manage your cookie preferences through your device's browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into and using the kekiya Platform.
kekiya retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, comply with applicable legal retention obligations, and resolve any outstanding disputes or enforcement matters. The retention periods applied to different categories of personal data are as follows:
At the end of the applicable retention period, personal data is securely and permanently deleted or anonymised using industry-standard data destruction methods. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for Platform analytics and improvement purposes.
As a kekiya player, you hold a number of rights with respect to the personal data that kekiya holds about you. kekiya is committed to honouring these rights promptly and transparently. Your rights are described below:
To exercise any of these rights, please contact kekiya's data protection team at [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. kekiya will acknowledge your request within 5 business days and complete it within 30 calendar days unless an extension is necessary and communicated to you in advance.
kekiya implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our core security controls include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kekiya will notify you without undue delay by email to your registered address, providing a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the steps kekiya has taken or proposes to take to address it.
The kekiya Platform is strictly intended for adults aged 18 years and above. kekiya does not knowingly collect, process, or store personal data relating to individuals under the age of 18. Our registration and verification processes are specifically designed to prevent minors from creating accounts or accessing any real-money gaming or betting features.
If kekiya discovers or is notified that it has inadvertently collected personal data from an individual who is under 18 years of age, it will immediately:
If you are the parent or legal guardian of a minor and believe your child may have accessed or registered on the kekiya Platform, please contact us immediately at [email protected]. We will treat all such reports as urgent and respond within 24 hours.
The kekiya Platform integrates game content supplied by third-party game studios including Pragmatic Play, PG Soft, Evolution Gaming, and JILI. When you launch and play a game supplied by these studios, a direct data connection is established between your device and the game studio's servers to deliver the game content in real time. The data exchanged in this connection (typically session identifiers, bet data, and game outcome data) is processed by the game studio in accordance with their own privacy policies, which are independent of this Policy.
Similarly, when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, your payment transaction data is processed by the relevant mobile financial service provider in accordance with their own privacy and data handling practices. kekiya is not responsible for the privacy practices of these third-party providers.
kekiya strongly recommends that you review the privacy policies of all third-party service providers whose services you interact with through or in connection with the kekiya Platform. Links to third-party privacy policies are not provided here because kekiya does not link to external websites from the kekiya Platform.
kekiya reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, data protection best practices, or the way kekiya operates the Platform. When we make material changes to this Policy, we will notify all registered players by email to their registered address at least 14 days before the revised Policy takes effect, and we will display a prominent notice on the Platform drawing attention to the changes.
The version number and effective date displayed at the top of this document will be updated with each revision. We encourage you to review this Policy periodically even when you have not received a change notification, to ensure you remain informed about how kekiya handles your personal data.
Your continued use of the kekiya Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you may close your account by contacting kekiya support and requesting account closure, and kekiya will return any eligible balance in accordance with its account closure procedure.
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data subject rights described in Section 9, please contact kekiya's dedicated data protection team using the details below. All communications should be submitted in English to ensure accurate and timely handling.
When submitting a data rights request, please include your registered kekiya username, the email address associated with your account, and a clear description of the right you wish to exercise or the concern you wish to raise. Do not include your account password, full payment method numbers, or OTP codes in any email correspondence with kekiya.
Six core commitments that underpin kekiya's approach to data privacy and security for every player in Bangladesh.
Every byte of data transmitted between your device and the kekiya Platform is protected by 256-bit SSL/TLS encryption. Sensitive records stored in our databases are additionally protected by AES-256 encryption at rest, ensuring your data is unreadable to any unauthorised party.
kekiya enforces rigorous Know Your Customer checks using NID, passport, and driving licence verification. This protects the integrity of the Platform, prevents identity fraud, and ensures that only verified adults aged 18 and above can access real-money games and betting markets.
kekiya has a firm, unconditional policy against selling, renting, or trading your personal data to third-party advertisers, data brokers, or marketing companies. Your data is used exclusively for the purposes described in this Privacy Policy and for no other commercial purpose.
All kekiya accounts are secured with OTP-based two-factor authentication delivered to your registered Bangladeshi mobile number via bKash, Nagad, or direct SMS. This critical second layer of verification prevents unauthorised account access even if your password is compromised.
kekiya retains your data only for as long as legally required or operationally necessary. Account, transaction, and KYC records are retained for five years after account closure in line with financial regulations, after which data is securely and permanently deleted or fully anonymised.
You hold eight distinct data subject rights over your personal information at kekiya — including access, rectification, erasure, portability, and the right to object to processing. All requests are acknowledged within 5 business days and resolved within 30 calendar days at no charge.
Now that you understand exactly how kekiya handles your personal data, explore the full range of games, sports betting markets, and responsible gaming tools available on Bangladesh's most trusted online casino platform.