korkya Privacy Policy

Information We Collect

korkya collects personal information when you register an account, make deposits or withdrawals, place bets, interact with our support team, or use any feature of our platform. We collect only the data that is necessary for us to provide a safe, fair, and legally compliant gaming service to players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and residential address
• Identity verification (KYC): National identity card, passport, driving licence, or other government-issued photo identification
• Proof of address: Utility bill, bank statement, or official correspondence dated within 90 days
• Payment method details: bKash or Nagad mobile wallet number, Rocket account number, Upay details, bank account or card information used for deposits and withdrawals
• Support communications: Messages, complaints, dispute correspondence, and chat transcripts between you and our support team
• Responsible gaming preferences: Deposit limit settings, self-exclusion requests, time-out preferences, and any other player protection requests you submit

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6)
• Usage data: Pages visited, features used, bet history, game sessions played, deposit and withdrawal history, session duration, and navigation patterns
• Cookies and tracking technologies: See the dedicated Cookies section of this Policy for full details
• Geolocation data: Approximate geographic location derived from your IP address, used to apply any applicable regional access controls

Information from Third Parties

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card networks such as Visa and Mastercard
• Identity verification providers: Results of automated document verification checks performed by our KYC service partners
• Fraud prevention services: Risk scoring and flagging data from third-party fraud detection tools that help us protect the platform and its players
• Game providers: Session and outcome data from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, shared to support dispute resolution and fair play monitoring

How We Use Your Data

korkya uses the personal data we collect exclusively for legitimate, defined purposes. We do not sell your personal information to third parties. The table below summarises the primary purposes for which we process your data.

We may also use aggregated, anonymised data (which cannot identify you personally) for internal reporting, product development, and market analysis. This anonymised data is not subject to the same restrictions as personal data under this Policy.

Legal Basis for Processing

korkya processes your personal data only where a valid legal basis exists. We rely on the following lawful bases, consistent with internationally recognised data protection principles:

• Contract performance: Processing is necessary to enter into or fulfil the contract between you and korkya — for example, registering your account, processing payments, and providing access to games.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) rules, know-your-customer (KYC) requirements, and responsible gaming mandates.
• Legitimate interests: Processing serves korkya's legitimate business interests, such as preventing fraud, securing the platform, improving our services, and understanding how players use the platform — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain types of processing, such as sending personalised promotional communications, we rely on your explicit, freely given consent. You may withdraw your consent at any time by contacting our support team or updating your account communication preferences.

Cookies & Tracking Technologies

korkya uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, to analyse how you use our services, and — where you have consented — to deliver relevant promotional content. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

Essential Cookies

These cookies are strictly necessary for the korkya platform to function. They maintain your login session, remember items in your bet slip, preserve your responsible gaming settings, and enable secure communication between your browser and our servers. Essential cookies cannot be disabled without breaking core platform functionality.

Performance & Analytics Cookies

These cookies collect anonymised information about how visitors use the korkya platform — which pages are visited most often, where errors occur, and how navigation flows through the site. This data helps us identify areas for improvement and optimise the user experience for players across Bangladesh. We use industry-standard analytics tools for this purpose.

Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, and previously used payment methods — so you do not have to re-enter them on every visit. Functional cookies improve convenience but are not essential to the platform's core operation.

Marketing & Targeting Cookies

With your consent, korkya may use targeting cookies to understand your interests and serve relevant promotional offers. These cookies may track your activity across korkya pages. You may withdraw your consent for marketing cookies at any time by adjusting your account communication preferences. Withdrawing consent for marketing cookies does not affect the functionality of the platform.

Data Sharing & Disclosure

korkya does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

Service Providers & Technology Partners

We share data with carefully selected third-party service providers who assist us in operating the korkya platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors), KYC and identity verification providers, fraud prevention services, cloud hosting and infrastructure providers, customer support platform operators, and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). All service providers are contractually obligated to process your data only as instructed by korkya and to maintain appropriate security standards.

Legal & Regulatory Disclosures

korkya may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or legal process. This includes disclosures related to anti-money laundering investigations, fraud investigations, tax compliance obligations, or other regulatory requirements. korkya will, where legally permitted, notify you of such disclosures.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of korkya's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players via email or a prominent platform notice prior to any such transfer taking effect, and any acquiring entity will be bound by the terms of this Privacy Policy.

With Your Consent

We may share your data with third parties in other circumstances where you have given your explicit, informed consent. You may withdraw such consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Retention

korkya retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your active account relationship with korkya, plus a minimum of 5 years following account closure to satisfy anti-money laundering and financial record-keeping requirements
• KYC and identity verification documents: Retained for a minimum of 5 years after the end of the account relationship, or longer if required by applicable law
• Transaction records: Retained for a minimum of 5 years after the transaction date
• Support and communications data: Retained for 3 years from the date of the last communication, unless the matter is subject to ongoing dispute or legal proceedings
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent, whichever is later
• Technical and usage logs: Retained for up to 13 months for security and fraud analysis purposes, after which they are anonymised or deleted

When personal data is no longer required for any lawful purpose, korkya will securely delete or anonymise it in accordance with industry-standard data disposal procedures.

Data Security

korkya takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction. While no online platform can guarantee absolute security, korkya's security programme is designed to reflect industry best practices for online gaming platforms.

Technical Safeguards

• SSL/TLS encryption: All data transmitted between your browser or device and the korkya platform is encrypted using industry-standard SSL/TLS protocols
• Data encryption at rest: Sensitive personal data and payment information stored on our servers is encrypted using AES-256 or equivalent strong encryption standards
• Access controls: Personal data is accessible only to authorised korkya personnel and service providers on a strict need-to-know basis, with role-based access controls enforced
• Two-factor authentication: korkya supports two-factor authentication (2FA) for player accounts, providing an additional layer of protection beyond a username and password
• Penetration testing: korkya's platform and infrastructure undergo regular security assessments and penetration tests conducted by qualified security professionals
• Intrusion detection: Automated monitoring systems are in place to detect and respond to suspicious activity, attempted breaches, and anomalous access patterns in real time

Organisational Safeguards

• All staff and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training
• korkya maintains a documented incident response procedure for addressing data security events promptly and effectively
• Third-party service providers are assessed for security compliance before engagement and are subject to contractual data processing obligations

Your Privacy Rights

As a player on the korkya platform, you have a number of rights in relation to your personal data. korkya is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving your request.

• Right to access: You may request a copy of the personal data korkya holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that certain data must be retained for legal compliance purposes and cannot be erased on request alone.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your data where we rely on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The korkya platform is strictly for adults aged 18 years and above. korkya does not knowingly collect, process, or store personal data relating to individuals under the age of 18. If you are under 18, you must not register an account or attempt to use any feature of the korkya platform.

If korkya discovers or has reasonable grounds to believe that an account belongs to a person under the age of 18, the account will be immediately suspended, all associated personal data will be flagged for deletion (subject to any legal retention obligations), and the matter may be referred to relevant authorities. Any deposits made by an underage player will be returned to the source payment method following identity verification.

If you are a parent or guardian and believe that your child has provided personal data to korkya, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly. For further guidance on protecting minors from gambling, please visit our Responsible Gaming page.

Third-Party Links & Services

The korkya platform integrates with a number of third-party services — including game providers, payment gateways, and support tools — each of which operates under its own privacy policy and terms of service. While korkya takes care to work only with reputable, security-conscious partners, we cannot accept responsibility for the privacy practices of third-party platforms or services.

When you interact with a third-party game studio's interface (for example, a live dealer table powered by Evolution Gaming or a slot game by Pragmatic Play), that interaction may be subject to the game studio's own data collection practices in addition to korkya's. korkya recommends that you review the privacy policies of any third-party service you interact with through the korkya platform.

Similarly, when you complete a payment transaction via bKash, Nagad, Rocket, or Upay, the payment provider processes transaction data in accordance with its own privacy policy and applicable financial regulations. korkya receives only the transaction confirmation data necessary to credit your korkya wallet.

Updates to This Policy

korkya reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email to their registered address and/or via a prominent notice on the korkya platform at least 7 days before the changes take effect.

The most current version of this Privacy Policy will always be accessible at korkya.net/privacy-policy, along with the effective date of the latest revision. Minor, non-material clarifications may be made without advance notice but will be reflected in the "Last Updated" date at the top of this page.

Your continued use of the korkya platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any changes, you must cease using the korkya platform and request account closure.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way korkya handles your personal data, please get in touch with our support team. We are committed to responding to all privacy-related enquiries within 5 business days.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Support hours: 24/7 — our bilingual support team is available around the clock
• Languages: English and Bengali

For responsible gaming concerns, including self-exclusion requests and deposit limit adjustments, please visit our dedicated Responsible Gaming page, which provides full details of the player protection tools available on the korkya platform.