Data Protection · GDPR Compliant

Carry Kiya Privacy Policy

Your personal information matters to us. This page clearly explains what data you provide when registering with Carry Kiya, how it is used, where it is stored, and how it is kept secure.

Last updated: 1 January 2026
Our Commitment to Data Protection
Data stored with AES-256 encryption
Your Data Is Never Sold to Third Parties
GDPR & International Standards Compliance
You may request deletion of your data at any time.
Breach notification within 72 hours
No marketing messages without your consent
How we We Protect Your Data

Six pillars of security that keep Carry Kiya trustworthy

End-to-End Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3 — no one can intercept it in transit, not even your Internet Service Provider.

Secure Data Storage

All data on our servers is stored with AES-256 encryption. Passwords are never stored in plain text — only bcrypt hashes are kept, making it impossible to reverse-engineer the original password.

Your Data Is Never Sold

Carry Kiya never sells your personal information to advertisers or third parties. Your name, phone number, or email is never shared for commercial purposes.

You're in Control of Your Data

Under GDPR, you can view, correct, or delete your data at any time. Simply submit a request to our support team and it will be completed within 30 days.

Regular security audits

The entire system undergoes a full security audit by third-party cybersecurity experts every quarter. Any vulnerabilities identified are resolved within 48 hours.

Prompt incident reporting

If any unauthorized data access is detected, affected users are notified within 72 hours. Transparency is at the core of how we operate.

What Data Collected?

What Data, Why It's Collected, and How Long It's Kept

Data Type Purpose Third parties
Name & AddressKYC VerificationNo
Mobile numberOTP & SupportNo
EmailNotificationsNo
Date of birthAge VerificationNo
IP addressSecurityCloudflare only
Device InformationApp optimisationNo
Transaction HistoryAML ComplianceLegal Requirements
Betting HistoryService ImprovementNo
How Your Data Is flows

From Registration to Secure Storage

1
Information You Provide

During registration or the KYC process, you provide details such as your name, phone number, email, and other information. This is transmitted in encrypted form over an HTTPS connection.

2
Encrypted Storage on Servers

All data is stored on our servers with AES-256 encryption the moment it arrives. Only authorized Carry Kiya personnel can access the information they need.

3
Used only as needed

Data is used solely for service delivery, KYC verification, and legal compliance. It is never shared with advertisers or third parties.

4
Regular security audits

The security of stored data is verified every quarter by external auditors.

5
Data deletion upon account closure

If you request account closure, all personal data will be permanently deleted once legal retention obligations have been met (typically 5 years).

Your Data Rights at a Glance
Access

The right to know what information we hold about you.

Correction

The right to request correction of inaccurate or outdated information.

Deletion

The right to request deletion of your data where no legal obligation to retain it exists.

Objection

The right to object to the processing of your data for specific purposes.

Portability

The right to receive your data in a machine-readable format.

Restrictions

The right to request restricted processing while an investigation is ongoing.


1 Introduction

Carry Kiya ("we", "our") places the highest priority on protecting your personal information. This Privacy Policy explains what data we collect from you when you use Carry Kiya's website, app, or any of our services — and how we use and safeguard it.

By using Carry Kiya, you consent to the processing of your information as described in this Privacy Policy. This policy should be read alongside our Terms & Conditions.

In plain terms: We only keep the data necessary to provide you with our services. Your information is never sold, never used for advertising, and never shared with third parties without your consent.


2 Data Collection

Carry Kiya collects data in two ways — information you provide directly, and data generated automatically as you use our services.

Directly Provided Information

  • At registration: full name, mobile number, email, and date of birth.
  • During KYC verification: national ID number or birth registration number.
  • During payment: your mobile banking number (not your PIN or password).
  • When contacting support: details of your complaint or request.

Automatically Collected Information

  • IP address (for security and geolocation purposes).
  • Device type, operating system, and browser.
  • Login time and date.
  • Which pages you visited on the platform and how long you spent on them.
  • Betting & gaming history.

When making a payment, your bKash or Nagad PIN never reaches Carry Kiya's servers. Payments go directly through the respective mobile banking system.


3 Data usage

Carry Kiya uses your data for the following purposes — and only for these purposes.

  • Service delivery: To ensure account creation, payment processing, and betting services.
  • Identity verification: To verify age and identity during the KYC process.
  • Security: To prevent fraud, money laundering, and other illegal activities.
  • Customer support: To resolve your complaints and requests.
  • Platform improvement: To analyse which features are used most and improve your overall experience.
  • Legal Compliance: To comply with the Curaçao licence and international AML regulations.
  • Contact: To send you important updates, security alerts, and promotional messages you have opted in to receive.

4 Data Retention

Your data is stored on Carry Kiya's secure servers, all of which are housed in ISO 27001-certified data centres with 24/7 physical security, backup power, and fire suppression systems.

How long is it retained?

  • Active account data: retained for as long as the account remains active.
  • After account closure: up to 5 years, as required by legal obligations.
  • Transaction records: 7 years, in accordance with AML regulations.
  • Support chat history: 3 years.
  • Web logs: 90 days.

5 Sharing data with third parties

Carry Kiya never sells your data. However, it may be shared in the following limited circumstances.

Service provider partners

Cloudflare (security & CDN), Evolution Gaming (live casino software), and other technology partners may process limited data. These organizations may only use the data for the purposes specified in their contracts.

Legal obligations

Data may be shared with law enforcement in cases involving a court order, a regulatory authority's request, or a money laundering investigation.

To be clear: Your information is never shared with advertising agencies, data brokers, or any other commercial third parties.


6 Cookie Policy

Carry Kiya's website uses cookies — small text files stored in your browser that help improve your experience.

Cookies can be disabled through your browser settings — however, doing so may affect certain features of the site.


7 Your Rights

Under GDPR and international data protection laws, you have the following rights. To exercise any of these rights, email us at privacy@carrykiya.com. We will respond within 30 days.

  • Right to Access: You can request to know what information we hold about you.
  • Right to Rectification: You may request correction of any inaccurate information.
  • Right to Erasure: You may request deletion of your data where there is no legal obligation to retain it.
  • Right to Portability: You can request your data in JSON or CSV format.
  • Right to object: You may object to your data being used for specific purposes.
  • Marketing Opt-Out: You can opt out of promotional messages at any time.

8 Children's privacy

Carry Kiya strictly does not collect information from anyone under the age of 18. Age is verified at registration, and KYC documents are requested in any case where there is doubt.

If we become aware that a minor's data has been collected inadvertently, it will be deleted immediately and the associated account will be closed.


9 Security measures

Carry Kiya follows the highest industry standards for data protection. The following technical and administrative measures are in place.

Technical Safeguards

  • HTTPS connection with TLS 1.3 (on all pages).
  • AES-256 database encryption.
  • Bcrypt password hashing.
  • Two-factor authentication (2FA) option.
  • Real-time anomaly detection system.
  • DDoS protection (Cloudflare).

Administrative safeguards

  • Only authorized personnel have access to personal information.
  • Annual data protection training for all staff.
  • Quarterly security assessments conducted by third-party auditors.
  • In the event of a data breach, users and relevant authorities will be notified within 72 hours.

10 Changes & Contact

Carry Kiya may update this Privacy Policy from time to time. For any significant changes, you will be notified via your registered mobile number and email. You can always check the "Last Updated" date at the top of the page to see when changes were made.

If you have any questions about this policy or wish to make a request regarding your data, please contact our dedicated privacy team.

Privacy Contact: privacy@carrykiya.com · General support: support@carrykiya.com

🔒 Your Data Is Safe

Get Started on a Trusted Platform Today

Your data is completely secure with Carry Kiya. Register with confidence and enjoy the best betting experience in Bangladesh.

18+ · Gamble Responsibly

General FAQ

Questions about Responsible Gaming Tools and Withdrawal Fees

Yes, Carry Kiya offers several responsible gaming tools, and they're straightforward to use. Log in to the app or website, go to your profile settings, and look for the "Responsible Gaming" option. Here's what you can do: First, set daily or weekly deposit limits — for example, capping deposits at ৳500 per day. Second, enable session time limits so you're automatically logged out after a set period. Third, set a Loss Limit — you'll receive an automatic alert once you've lost a specified amount. And the most powerful tool is Self-Exclusion — you can remove yourself from the platform for anywhere between 7 days and 6 months, during which logging in will not be possible.

The good news is that Carry Kiya charges no service fee on withdrawals. However, your mobile banking provider (such as bKash or Nagad) may apply their own cash-out charges — check their respective apps for details. As for limits, the minimum withdrawal amount is ৳500. The maximum depends on your account's verification level — a standard verified account can withdraw up to ৳50,000 per day. Higher limits apply once full KYC verification is completed. Withdrawals above ৳50,000 require additional verification and may take up to 2–3 business days.
বাংলা