Privacy Policy — How keriya11 Collects, Uses, and Protects Your Personal Data

For the purposes of this Privacy Policy, the data controller is keriya11 ("we", "us", "our"). As the data controller, keriya11 determines the purposes and the means by which your personal data is processed in connection with your use of the platform's gaming, betting, and customer account services.

keriya11 operates under an international offshore gaming licence and provides its services primarily to players located in Bangladesh. While Bangladesh does not currently enforce a dedicated comprehensive data-protection statute equivalent to the EU's GDPR, keriya11 voluntarily applies data-handling standards consistent with internationally recognised best practices, including principles of lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, and data security.

All data-related queries, requests to exercise privacy rights, or concerns about how keriya11 handles your personal information should be directed to the keriya11 data protection contact by email at support@keriya11. Please include "Privacy Request" in the subject line so that your message is routed to the appropriate team. Responses are issued within 30 calendar days of receiving a complete and verifiable request.

keriya11 collects personal data through several distinct channels: the account registration form, the keriya11 login process, deposit and withdrawal transactions, KYC identity verification, gameplay activity, and direct communications with our support team. The categories of data we collect are described below.

Data We Do NOT Collect

keriya11 does not collect or store full mobile wallet PINs, online banking passwords, or card CVV numbers. We do not collect biometric data (fingerprints, facial recognition data) through the platform. We do not collect data about minors; any account found to belong to a person under the age of 18 is closed immediately and all associated data is deleted as described in Section 6 of this policy.

Data Provided by Third Parties

In limited circumstances, keriya11 may receive data about you from third-party sources. These include: payment processors (transaction confirmation and fraud signals), identity verification service providers (document authentication results), and analytics partners (aggregated, anonymised usage patterns). Any such third-party data is handled in accordance with this Privacy Policy.

keriya11 processes your personal data for the following specific purposes. For each purpose, we identify the lawful basis on which the processing is carried out.

• Account creation and management: We use your identity and contact data to create and maintain your keriya11 account, authenticate your identity at keriya11 login, and communicate essential account-related information to you. Lawful basis: contract performance.
• Payment processing: We use your financial data to facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfers, and to process withdrawal requests to your verified BDT payment account. Lawful basis: contract performance.
• Identity verification (KYC): We use identity and document data to verify your age (18+ requirement), confirm your identity, and comply with anti-money-laundering obligations. Lawful basis: legal obligation.
• Fraud prevention and security: We use technical data, usage data, and financial data to detect and prevent fraudulent activity, multi-accounting, bonus abuse, and money laundering. Lawful basis: legitimate interest.
• Game and platform delivery: We use usage data and technical data to provide, maintain, and improve the gaming experience, including delivering personalised game recommendations. Lawful basis: contract performance and legitimate interest.
• Responsible gaming compliance: We use usage data and account activity data to monitor for signs of problem gambling, enforce deposit limits, process self-exclusion requests, and respond to responsible gaming tool activations. Lawful basis: legal obligation and legitimate interest. For more detail, see the Responsible Gaming page.
• Marketing communications: Where you have given explicit consent, we use your contact data and marketing preferences to send you promotional offers, bonus announcements, BPL and IPL season promotions, and seasonal offers (Eid, Pohela Boishakh, Victory Day). Lawful basis: consent. You may withdraw consent at any time by contacting support@keriya11.
• Customer support: We use communications data, identity data, and account data to resolve queries, complaints, and disputes raised through our support channels. Lawful basis: contract performance and legitimate interest.
• Legal and regulatory compliance: We may process and disclose your data as required by applicable law, court orders, or requests from competent authorities. Lawful basis: legal obligation.

keriya11 does not sell, rent, or exchange your personal data with third parties for their independent commercial purposes. Data sharing is limited to the following categories of recipients, each engaged for a specific operational purpose:

International Data Transfers

As an international gaming platform, some of keriya11's service providers and data infrastructure are located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, keriya11 implements contractual safeguards (including data processing agreements) to ensure your data continues to be handled securely and only for the purposes described in this policy. If you have questions about specific transfer mechanisms, contact support@keriya11.

When you visit keriya11, certain cookies and similar tracking technologies are placed on your device. These technologies help the platform function correctly, maintain your logged-in session, and provide a personalised experience. The categories of cookies used by keriya11 are as follows:

Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair or entirely prevent access to the keriya11 platform, as these cookies are essential for session authentication and secure payment processing. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

keriya11 does not use third-party advertising or behavioural-targeting cookies that track your activity across websites other than keriya11 itself.

The retention periods applied to different categories of personal data held by keriya11 are governed by a combination of operational necessity, legal obligation, and responsible gaming compliance requirements. The following schedule applies:

• Account and identity data: Retained for the lifetime of the active account, plus a minimum of 5 years following account closure. This retention is required to comply with anti-money-laundering obligations and to resolve any disputes arising after account closure.
• KYC and verification documents: Retained for a minimum of 5 years from the date of submission. After this period, documents are securely deleted from keriya11 systems unless a specific legal hold is in place.
• Transaction and payment records: Retained for a minimum of 5 years from the date of the transaction. This supports regulatory compliance, dispute resolution, and fraud investigation obligations.
• Gameplay and usage data: Retained for 3 years from the date of generation. Anonymised aggregate data derived from gameplay may be retained indefinitely for statistical analysis.
• Customer support communications: Retained for 3 years from the date of the last interaction in a given support thread.
• Marketing consent records: Retained for the duration of your account plus 2 years following account closure, to demonstrate compliance with consent obligations.
• Cookie and technical log data: Retained for up to 13 months from the date of collection, after which it is automatically purged from active systems.

Deletion Requests

Where you request deletion of your personal data and no legal retention obligation prevents deletion, keriya11 will complete the deletion within 30 calendar days of receiving a verified request. In cases where legal retention obligations mean that full deletion is not immediately possible, keriya11 will confirm which data categories are being retained, the legal basis for retention, and the date on which deletion will take place.

Regardless of the jurisdiction in which you are located, keriya11 provides all registered players with the following privacy rights in relation to their personal data:

• Right of access: You may request a copy of all personal data held about you by keriya11. We will provide this in a structured, commonly used, and machine-readable format (JSON or CSV) within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support@keriya11 with the corrected information and supporting evidence where applicable.
• Right to erasure ("right to be forgotten"): You may request that your personal data be deleted, subject to our legal retention obligations described in Section 6. We will confirm which data can be deleted immediately and which must be retained, along with the reason for retention.
• Right to restrict processing: In certain circumstances (for example, while the accuracy of data you have contested is being verified), you may request that processing of your data be restricted. During a restriction, keriya11 will not process the affected data for any purpose other than storage.
• Right to data portability: Where processing is based on your consent or contract performance, you may request a portable copy of your personal data in a machine-readable format.
• Right to withdraw consent: Where we process your data based on consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, email support@keriya11 with the subject line "Withdraw Marketing Consent".
• Right to object to automated decisions: Where a significant automated decision (such as account suspension or bonus forfeiture) has been made affecting your account, you have the right to request human review of that decision.

To exercise any of the above rights, contact keriya11 at support@keriya11 with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension before the initial deadline.

Protecting the personal data of keriya11 players is a platform-wide responsibility. The following technical and organisational measures are in place to safeguard your information at all times:

• 256-bit SSL/TLS encryption: All data transmitted between your device and keriya11 is encrypted in transit using industry-standard TLS protocols. Our SSL certificate is maintained and renewed continuously.
• Encrypted data storage: Personal data and financial records stored on keriya11 servers are encrypted at rest using AES-256 encryption. This means that even in the event of unauthorised physical server access, stored data is unreadable without the decryption key.
• Access controls: Logical access to personal data is restricted on a strict need-to-know basis. Only authorised keriya11 personnel with a legitimate operational reason may access player data, and all access events are logged and auditable.
• Two-factor authentication: keriya11's internal administrative systems require multi-factor authentication for all staff accessing player data. We also strongly recommend that players enable two-factor authentication on their own accounts where this option is available.
• Fraud detection systems: Real-time fraud detection algorithms monitor transaction patterns and login behaviour across all accounts. Suspicious activity triggers automated alerts and, where necessary, account protection measures.
• Regular security reviews: keriya11 conducts periodic internal security reviews of its data processing systems, access logs, and infrastructure to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to affected players, keriya11 will notify affected users by email within 72 hours of becoming aware of the breach, describing the nature of the incident, the data affected, and the steps being taken to address it.

While keriya11 takes all reasonable technical precautions, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own keriya11 login credentials, including your password and any two-factor authentication codes. If you suspect your account has been compromised, contact support@keriya11 immediately and change your password without delay.