Karya Privacy Policy — Your information is safe with us

Karya (karya.fun) is a trusted online gaming platform in Bangladesh. We place the highest importance on protecting the personal information of all our users. This Privacy Policy Applies to Karya's website, mobile app, and all associated services.

Karya's Privacy Policy is built in line with international data protection standards. We believe transparency is the foundation of trust — so this policy clearly explains what data we collect, why we collect it, and how your information is used.

• This policy applies to all users of Karya's services.
• By visiting Karya's site or creating an account, you are considered to have automatically agreed to this Privacy Policy.
• If you have any questions about this policy, please contact our support team directly.
• Although this policy is written in Bengali, the English version shall take precedence in the event of any legal dispute.

Karya only collects data that is genuinely necessary to operate our services properly. We do not collect information beyond what is needed.

A) Personal Identity Information

• Full name and date of birth
• Email Address & Mobile Number
• National ID or passport number (for KYC verification)
• Current residential address

B) Financial Information

• Mobile banking number (bKash, Nagad, Rocket)
• Transaction history and amounts
• Deposit & Withdrawal Records

C) Technical Information (Automatic)

• IP Address & Device Type
• Browser version and operating system
• Time spent on site and pages visited
• Cookie & Local Storage Data

D) Gaming Activity

• Game History & Betting Records
• Bonus usage details
• Session duration and frequency

Karya uses collected data only for defined and transparent purposes. We never use your information for unrelated activities.

• Account Management: Your information is used for registration, login, and profile updates.
• Payment Processing: Financial information is used to ensure reliable and fast processing of deposits and withdrawals.
• Identity Verification (KYC): Identity information is used to verify account ownership and age, and to prevent money laundering.
• Customer Service: Contact information is used to handle complaints and inquiries.
• Security Assurance: Technical data is used to detect unusual transactions, bot activity, and fraud.
• Responsible Gaming: Gaming data is used to monitor playing patterns, identify potential signs of problem gambling, and provide timely support.
• Personalization: Used to show game recommendations and promotional offers tailored to your preferences.
• Legal Obligations: Data is used to meet the legal and regulatory requirements of the relevant jurisdiction.

Karya never sells your personal data. However, in limited and defined circumstances, sharing certain information with trusted partners may be necessary.

Who Your Information May Be Shared With:

• Payment Processors: Mobile banking operators such as bKash, Nagad, and Rocket — used solely to complete transactions.
• Game Software Provider: Limited data required for the technical operation of games.
• KYC Verification Service: Approved service providers for identity verification.
• Legal Authorities: Where required by a government directive or court order.
• Cybersecurity Firms: For fraud investigation and prevention.

Karya follows industry-leading technology and security practices to keep your data safe. Our security infrastructure is regularly audited by independent third-party experts.

• 256-bit SSL/TLS Encryption: All data transmitted on the site goes through encrypted channels.
• PCI DSS Compliance: Financial information is stored in compliance with the highest Payment Card Industry security standards.
• Two-Factor Authentication (2FA): An option to add an extra layer of security to your account is available.
• Firewall & DDoS Protection: Advanced security measures at the server level.
• Encrypted Data Storage: All stored sensitive data is kept in an encrypted state.
• Limited Access Policy: Only authorized Karya staff have access to data on a need-to-know basis.
• Security Audit: Regular penetration testing and vulnerability assessments are conducted.

Karya uses cookies and similar technologies to improve site functionality and enhance your experience. Cookies are small text files stored in your browser.

Cookie Types & Purposes:

• Essential Cookies: To maintain login sessions and keep core site functionality running. Without these, the site will not work properly.
• Performance Cookies: Used to measure which pages are visited most and track loading times — applied toward site improvements.
• Functionality Cookies: To remember your language preference, theme settings, and other personalized configurations.
• Analytics Cookies: To understand overall usage patterns — no personal data is directly linked.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may cause some features to not work correctly.

Karya does not retain data beyond specified periods. Once the purpose has been fulfilled or the retention period has passed, data is securely deleted or anonymized.

• Account Information: For the duration of account activity and up to 5 years after closure.
• Transaction Records: Up to 7 years as required by legal obligations.
• KYC Documents: 5 years after verification, or as required by law.
• Gaming Log: Gaming activity records are retained for up to 3 years.
• Customer Service Records: Chat and support tickets are retained for up to 2 years.
• Cookie & Session Data: Session cookies are deleted when the browser is closed; persistent cookies last up to 1 year.

Every registered Karya user has the following rights over their own data. Contact our support team to exercise any of these rights.

Karya strictly does not serve anyone under 18. We do not knowingly collect or process any data from minors.

• Age verification is mandatory at the time of registration.
• Age verification is conducted through national ID as part of the KYC process.
• If we suspect that any minor's information has been collected, it will be deleted immediately and the associated account will be closed.
• If parents believe their child's data has been collected, please contact our support team — we will act promptly.

Karya may review and update this Privacy Policy from time to time. Changes may be driven by legal requirements, new service launches, or security improvements.

• For significant changes, advance notice will be provided via email or in-app notification.
• Updated policies take effect from the date of publication.
• Continued use of the platform after any changes will be considered your acceptance of the updated policy.
• Previous versions can be requested through Support archives.

The latest version of this Privacy Policy is always available at karya.fun/privacy-policy Available on the page.

If you have any questions or concerns about this Privacy Policy, or wish to exercise your data rights, please get in touch with Karya.

• Upon receiving a privacy-related complaint, Karya will provide an initial response within 7 business days.
• Complex matters will be fully resolved within 30 business days.
• If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant regulatory authority.