kariya Privacy Policy

This Privacy Policy ("Policy") describes how kariya ("kariya", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the kariya online gaming and sports betting platform available at https://kariya.win ("the Platform").

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, during the Know Your Customer (KYC) verification process, during payment transactions, and during normal use of the kariya website, games, and customer support channels.

By registering an account on kariya or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact support to request account closure.

kariya collects personal data from you in three primary ways: information you provide directly, information collected automatically as you use the Platform, and information obtained from third-party service providers. The categories of data we collect are described below.

Information You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile phone number (Bangladesh), and chosen username when you create a kariya account.
• Identity Verification (KYC) Data: Copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence, and any supporting proof-of-address documentation.
• Payment Data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank), and card details (Visa, Mastercard) provided when making deposits or requesting withdrawals. Full card numbers are never stored on kariya's servers — they are handled directly by our certified payment processors.
• Communications Data: The content of messages you send to kariya via live chat, email, or contact forms, including any personal information you choose to include in those communications.
• Responsible Gaming Data: Deposit limits, self-exclusion preferences, and cooling-off settings you configure through the Platform's responsible gaming tools.

Information Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, games played, bet amounts, session start and end times, navigation paths, search queries within the Platform, and feature interactions.
• Transaction Data: A complete record of all deposits, withdrawals, wagers placed, game outcomes, and bonus activity associated with your account.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 6 of this Policy.

Information from Third Parties

• Identity Verification Providers: Third-party KYC and anti-money laundering (AML) screening services may provide us with verification status results, fraud risk scores, and sanctions screening outcomes relating to your identity.
• Payment Processors: Transaction status updates, payment confirmations, and fraud signals from bKash, Nagad, Rocket, and card-processing partners.
• Game Providers: Technical game-session data and results provided by third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to facilitate game play and settle wagers correctly.

kariya uses the personal data we collect for the following purposes. We process your data only where we have a valid legal basis to do so, as set out in Section 4.

kariya processes your personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contract Performance: Processing that is necessary to create and manage your kariya account, process payments, deliver games, and provide the services you have requested. Without this processing, kariya cannot provide you with the Platform services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML and counter-terrorism financing (CTF) obligations, age verification requirements, and responses to lawful requests from competent authorities in Bangladesh or internationally.
• Legitimate Interests: Processing carried out for kariya's legitimate business interests, including fraud detection, security monitoring, Platform improvement, and responsible gaming monitoring — provided these interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications and the use of non-essential cookies, where kariya has obtained your explicit opt-in consent. You may withdraw your consent at any time by contacting support or adjusting your account settings.

kariya does not sell your personal data. We share personal data with third parties only where it is necessary to operate the Platform, comply with legal obligations, or protect the security of the service. The categories of third parties with whom we share data are listed below:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card-processing partners receive the minimum data necessary to process your deposits and withdrawals securely.
• KYC & AML Verification Services: Third-party identity verification and sanctions-screening providers receive your identity data solely for the purpose of completing mandatory KYC checks.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive session data necessary to deliver and settle game rounds correctly.
• IT & Security Infrastructure Providers: Cloud hosting providers, content delivery networks, and cybersecurity service providers who support the technical operation of the kariya Platform under strict data processing agreements.
• Competent Authorities: Law enforcement agencies, financial intelligence units, or other regulatory bodies in Bangladesh or internationally where kariya is legally required to disclose data in response to a lawful request, court order, or regulatory investigation.

All third-party service providers engaged by kariya are contractually bound to process your personal data only in accordance with kariya's instructions, to maintain appropriate security measures, and to comply with applicable data protection law. kariya does not permit third parties to use your data for their own marketing purposes.

kariya uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain your login session, and understand how players interact with the site.

The categories of cookies used on kariya are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred deposit method, and game lobby filters. Disabling these cookies may reduce personalisation features.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, which games are most popular, and where users encounter difficulties. This data helps kariya improve the Platform experience.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content on the kariya Platform based on your activity and preferences.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Platform. For analytics and marketing cookies, you may withdraw your consent at any time by contacting support at [email protected].

kariya retains personal data for no longer than is necessary for the purpose for which it was collected, unless a longer retention period is required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the duration of your active account relationship with kariya and for a period of five (5) years after account closure, in accordance with AML and financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the customer relationship, as required by anti-money laundering regulations.
• Transaction Records: Complete records of all deposits, withdrawals, wagers, and game outcomes are retained for five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, to support the resolution of any future disputes.
• Analytics & Usage Data: Aggregated and anonymised analytics data may be retained indefinitely. Personal usage data is anonymised within 24 months of collection.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for the duration of your account plus three (3) years to demonstrate compliance.

When the applicable retention period expires, kariya will securely delete, destroy, or anonymise the relevant personal data using industry-standard data disposal methods. You may request early deletion of certain data categories subject to the legal retention obligations described above — see Section 8 for your data rights.

As a kariya player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. kariya will respond to all verifiable requests within 30 calendar days.

kariya implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and kariya's servers is encrypted using 256-bit SSL/TLS protocols. The kariya domain enforces HTTPS at all times.
• Data-at-Rest Encryption: Sensitive personal data stored on kariya's servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to kariya staff and authorised processors who require it to perform their specific job functions. All staff with data access undergo data protection training.
• Intrusion Detection: kariya employs continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: kariya maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, you will be notified without undue delay in accordance with applicable data protection law.

The kariya Platform is strictly for persons aged 18 years and above. kariya does not knowingly collect, process, or store personal data relating to persons under the age of 18.

If kariya becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, the data will be deleted, and any funds associated with the account will be handled in accordance with our Terms & Conditions.

kariya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services offered on the Platform. When material changes are made, we will notify registered players via the email address on file and by displaying a prominent notice on the Platform.

The revised Policy will state the date on which it takes effect. Your continued use of the kariya Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how kariya protects your information.

The version history of this Policy, including a summary of material changes, is available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kariya processes your personal data, please contact our privacy support team using the details below:

• Email: [email protected]
• Response Time: kariya aims to respond to all privacy-related enquiries within 30 calendar days of receipt.
• Subject Line: Please use the subject line "Privacy Request — [Your Username]" to ensure your message is routed to the correct team promptly.

If you are not satisfied with kariya's response to a privacy complaint, you may escalate your complaint to an independent dispute resolution body or the relevant data protection authority applicable in your jurisdiction. kariya will cooperate fully with any such escalation process.