Draft, under legal review. This page explains how Kriraghor works today; the final wording may change before paid launch.

Privacy policy

Version 0.2, updated 25 October 2026

This policy explains what personal data Kriraghor collects, why, who can see it and the choices you have.

1. What we collect

  • Account: your name, phone number, email, username and password (stored only as a secure hash).
  • Verification: your NID images and number, and business documents for business roles. These are encrypted, and every time staff open them it is recorded.
  • Esports: your game UIDs and in-game names, results and rankings.
  • Payouts: your bKash or Nagad number, encrypted and shown masked.
  • Activity: bookings, orders, hires, passes, registrations, payments, reviews, reports and messages sent in Kriraghor.
  • Delivery: the name, phone and address you give for an order.
  • Location: only when you tap "Use my location", to sort venues by distance. It isn't stored.
  • Technical: device, browser, IP address and logs, used for security and to fix problems.

2. Why we use it

  • To provide the services you ask for and to take, hold and release payments.
  • To verify people and businesses and to keep fake accounts, cheating and fraud off the platform.
  • To send codes, receipts and notices. Security alerts, such as a password change, can't be switched off.
  • To meet our legal, tax and accounting duties.

3. Who can see what

  • A shop sees your name, phone and address only after it accepts your order.
  • A person you hire, or who hires you, sees your phone number only after payment.
  • A venue owner sees the name on your booking.
  • Your public player page shows only what you choose to show. It never shows your gender, date of birth or phone.
  • Our payment partner, SMS and email providers handle data only to deliver their service.
  • Authorities, when Bangladesh law requires it.

We don't sell your personal data.

4. How long we keep it

We keep your data while your account is open and as long as the law requires for payment and tax records. Closing an account removes it from public view. The photos of your NID are deleted 90 days after the verification decision (see NID verification below). [The retention period for other verification records will be set during legal review.]

5. How we protect it

NID numbers, payout account numbers and event room credentials are encrypted at rest. Staff can see only what their role needs, and sensitive views are recorded in an audit log.

6. Your choices

  • See and correct your details in My account.
  • Choose which notices you get by SMS, email or in the app (security notices always come).
  • Ask for a copy of your data, or close your account, through the Help centre.

7. NID verification

We ask for your National ID (NID) only when you need it: to sell on Kriraghor, to be hired, to receive business payouts or to withdraw winnings. It lets us check who you are and keep fraud off the platform.

  • What we collect: your NID number, the name and date of birth on it, and photos of its front and back and a selfie of you holding it.
  • Who sees it: only Kriraghor review staff. The NID number is encrypted, only its last 4 digits are shown, and every view is recorded.
  • How long: the photos are deleted 90 days after the verification decision.
  • Age: NID verification is for people aged 18 and over.

We ask for your consent explicitly each time you send your NID. You can withdraw it by asking Kriraghor support; we then delete your verification data, except what the law requires us to keep.

8. Children

NID verification is for people aged 18 and over; there is no guardian route yet. [The minimum age for an account, and for paid entry and withdrawals, is still being decided (open questions Q116 and Q181).]

9. Changes

We will tell you about important changes before they take effect. The version and date are at the top of this page.

10. Contact

See the Help centre. [A privacy contact will be added before launch.]