Kirabat's Privacy Policy

When you register and use Kirabat's services, we collect certain personal information. The sole purpose of collecting this information is to provide you with a safe, fair, and enjoyable betting experience. We never ask for information we don't need.

Data collection falls into two main categories — information you provide directly (identity, contact, payment) and data collected automatically as you use the platform (device info, IP address, browsing behaviour). See the table below for details:

Kirabat collects your information through various methods, each fully transparent and based on your consent. We never collect information without your knowledge.

• Registration form: Information you provide directly when opening an account.
• KYC Verification Process: Documents uploaded for identity verification.
• Payment Transactions: Payment information collected automatically during deposits and withdrawals.
• Cookies & log files: Data collected automatically through technical means while you use the website or app.
• Customer Support Contact: Information provided during live chat, email, or phone conversations.
• Mobile app: Data related to your device when using the Kirabat app.

Kirabat uses the information it collects only for specific, limited purposes. We do not sell or rent your data to any advertising agency or data broker.

• To create, manage, and verify your account.
• To process financial transactions securely and prevent fraud.
• To deliver betting services, live scores, and personalized offers.
• To meet AML (Anti-Money Laundering) and KYC legal obligations.
• To promote responsible gaming and support at-risk players.
• To improve customer service and resolve technical issues.
• To maintain the security, stability, and performance of the platform.
• To submit reports to the relevant authorities in compliance with legal directives.

We follow the principle of "purpose limitation" — your data will only ever be used for the purpose for which it was collected. Any new use requires fresh consent from you.

Kirabat uses industry-leading technology to protect your data. Our servers are hosted in international data centers with round-the-clock monitoring and physical security measures in place.

• 256-bit AES encryption: All stored sensitive data is encrypted.
• TLS 1.3 protocol: All communication between your browser and our servers is fully secured.
• Two-factor authentication (2FA): An additional layer of security for your account.
• Firewall & DDoS protection: Advanced systems to protect against cyberattacks.
• Regular Security Audits: Periodic audits conducted by third-party experts.
• Data backup: Daily automated backups and a disaster recovery plan.

Your data is generally retained for up to 5 years from the date your account is closed, as required by law. After that period, it is securely deleted.

Kirabat does not sell your data. However, to operate our services, limited data is shared with trusted third parties under specific data processing agreements in each case.

All third-party providers are contractually required to comply with Kirabat's privacy standards. We do not voluntarily share information with government agencies or law enforcement without a legal directive.

Kirabat uses cookies on its website and app. Cookies are small text files stored on your device that help improve your experience.

We do not use advertising or behavioral tracking cookies. You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect certain platform features.

You have full rights over the information stored on your Kirabat account. In accordance with GDPR and international privacy laws, we uphold the following rights:

• Right to know: You have the right to request a full report of all the information we hold about you.
• Right to Rectification: You can request corrections to inaccurate or outdated information through your account settings or by contacting support.
• Right to Erasure: Your data will be deleted upon request, unless we are required to retain it by law.
• Right to restrict processing: In certain circumstances, you can request that processing of your data be temporarily suspended.
• Right to Portability: Download your data in a machine-readable format (JSON/CSV) at any time.
• Right to object: You can object to marketing communications or profiling at any time.
• Right to withdraw consent: You may withdraw any consent you have given at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Kirabat is an 18+ platform. Account registration or use of the platform by anyone under the age of 18 is strictly prohibited. We do not knowingly collect any information from minors.

Age verification is mandatory at registration, and date of birth is confirmed during the KYC process. If we have reason to believe an account holder is underage, that account will be suspended immediately and any collected data will be deleted.

Kirabat uses international cloud infrastructure, which means your data may sometimes be stored on servers outside Bangladesh. However, it is always encrypted and handled under strict contractual agreements.

• Data transfers only take place with GDPR-compliant countries or under approved standard contractual clauses.
• All international service providers are contractually required to comply with Kirabat's privacy standards.
• All data is encrypted at all times and access is strictly limited.
• Data required under Bangladeshi law is kept on local servers.

Kirabat may update this Privacy Policy from time to time. The "Last Updated" date at the top of the page will reflect each change. For significant updates, advance notice will be sent to your registered email address.

Continued use of the platform after an update constitutes acceptance of the revised policy. If you do not agree with the new policy, you have the right to withdraw your balance and close your account.

For any questions, complaints, or data-related requests regarding our Privacy Policy, please contact our Data Protection team directly. We typically respond within 24–48 hours.