Privacy Policy — How crikcx Collects, Uses, and Protects Your Personal Data

1. Information We Collect

crikcx collects personal data from players through several channels: directly when you register an account, during the KYC verification process, when you use the platform's services, and automatically through the technical operation of the website. The categories of personal data we collect are set out below.

1.1 Registration and Account Data

When you create a crikcx account, we collect the information you provide during registration, including your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi cities), email address, and mobile phone number. This data is mandatory for account creation and is used to identify you as a player throughout your relationship with crikcx.

1.2 Identity Verification (KYC) Data

To comply with our age verification and anti-money laundering obligations, crikcx collects copies of government-issued identity documents submitted during the KYC process. These may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid Bangladeshi passport (photo page)
• Bangladesh driving licence
• Utility bills or bank statements for address verification
• Payment account ownership documentation (e.g., bKash or Nagad account confirmation)

1.3 Financial Transaction Data

crikcx records details of all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard), transaction timestamps, and transaction reference numbers. We do not store full payment card numbers; card data is handled by our PCI-DSS compliant payment processors.

1.4 Gaming and Betting Activity Data

We record your gaming and betting activity on the platform, including the games you play (slots, live baccarat, Teen Patti, Andar Bahar, crash games, fishing games), the sports markets you bet on (cricket BPL, IPL, T20 World Cup, Bangladesh Tigers, football), wager amounts, game outcomes, session durations, and responsible gaming tool usage (deposit limits, self-exclusion requests). This data is used for account management, dispute resolution, and responsible gaming purposes.

1.5 Technical and Device Data

When you access the crikcx platform, we automatically collect certain technical data, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data

If you contact crikcx support via email, live chat, or any other channel, we retain records of those communications — including the content of your messages and our responses — for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

crikcx processes your personal data only for the purposes described in this policy and only where we have a lawful basis for doing so. The primary purposes for which we use your data are as follows.

2.1 Account Management and Service Delivery

We use your registration data to create and maintain your crikcx player account, to authenticate your identity each time you log in, to process your deposits and withdrawals, to credit your account with winnings, and to provide access to the full range of crikcx games and betting markets. Without this processing, we cannot provide the crikcx service.

2.2 Age and Identity Verification

crikcx is a strictly 18+ platform. We use your registration data and KYC documents to verify that you meet the minimum age requirement before your account is fully activated and before withdrawals are processed. Age verification is a legal obligation and a core responsible gaming commitment of crikcx.

2.3 Fraud Prevention and Security

We use transaction data, technical data, and gaming activity data to detect and prevent fraudulent activity, including the creation of duplicate accounts, the use of stolen payment credentials, money laundering, and bonus abuse. Automated monitoring systems and manual review by the crikcx security team both form part of this activity.

2.4 Responsible Gaming

crikcx uses your gaming activity data — including session frequency, wager amounts, and deposit patterns — to monitor for indicators of potential problem gambling and to support the responsible gaming tools you have set on your account. Where our responsible gaming systems identify a player who may be experiencing difficulties, our team may make proactive contact to offer support.

2.5 Legal and Regulatory Compliance

crikcx is required to retain certain categories of data to comply with applicable anti-money laundering (AML) obligations and to respond to lawful requests from regulatory authorities and law enforcement agencies. Data processed for compliance purposes is handled on the basis of legal obligation.

2.6 Marketing Communications

With your explicit consent, crikcx may use your email address and mobile number to send you marketing communications about crikcx promotions, including welcome bonuses, seasonal offers tied to Eid, Pohela Boishakh, BPL season, and the T20 World Cup, and other platform updates. You may withdraw your consent to marketing communications at any time without affecting your ability to use the crikcx platform.

2.7 Platform Improvement and Analytics

Aggregated and anonymised technical and gaming activity data is used by crikcx to analyse platform performance, identify popular games and markets, improve the user experience, and plan future product development. Analytics data used for these purposes cannot be linked back to individual players.

3. Data Sharing and Disclosure

crikcx does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Game and Technology Providers

To deliver our casino and sports betting services, crikcx works with licensed game studios and technology providers including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi. These providers may receive limited technical data (such as session identifiers and game event data) necessary for the operation of their games within the crikcx platform. They are contractually prohibited from using this data for any purpose other than game delivery.

3.2 Payment Service Providers

To process your deposits and withdrawals, crikcx shares necessary transaction data with our payment partners, including the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme processors for Visa and Mastercard transactions. These providers receive only the data required to complete and verify each transaction.

3.3 Identity Verification Services

crikcx may engage third-party KYC and identity verification service providers to assist with the verification of identity documents. These providers process your KYC data under strict data processing agreements and are not permitted to retain or use your identity documents beyond the verification task.

3.4 Legal and Regulatory Disclosures

crikcx will disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, including in connection with anti-money laundering investigations, fraud investigations, or court orders. We will disclose the minimum data required to satisfy the legal obligation and will inform affected players of any such disclosure where legally permitted to do so.

3.5 Business Transfers

In the event that crikcx undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, crikcx will notify affected players and the acquiring entity will be required to honour this Privacy Policy or provide players with a new policy that affords equivalent protection.

4. Cookies and Tracking Technologies

The crikcx website uses cookies and similar technologies (including local storage and session storage) to ensure the platform functions correctly, to keep you securely logged in, and to understand how players navigate and use the site. This section explains what cookies we use and why.

4.1 Strictly Necessary Cookies

These cookies are essential to the operation of the crikcx platform and cannot be disabled. They include session authentication cookies that keep you logged into your account, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your language and region preferences. Without these cookies, core platform features including account login, deposits, and game play would not function.

4.2 Analytics Cookies

crikcx uses first-party analytics cookies to understand how players use the platform — which pages are visited most frequently, how long players spend on each section, and where players encounter difficulties. This data helps our development team improve the crikcx experience. Analytics cookies collect data in an aggregated, anonymised form. crikcx does not use Google Analytics or other third-party analytics services that send your data to external servers.

4.3 Functional Cookies

Functional cookies enable crikcx to remember preferences you have set, including your chosen game lobby view, responsible gaming tool settings (deposit limits, session reminders), and notification preferences. Disabling functional cookies may affect some non-essential platform features.

4.4 What We Do Not Use

crikcx does not use third-party advertising cookies, retargeting pixels, cross-site tracking technologies, or social media tracking scripts on its platform. We do not share cookie data with advertising networks.

4.5 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging into your crikcx account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. The crikcx cookie settings panel in your account settings also allows you to manage optional cookie categories.

5. Data Security and Storage

crikcx takes the security of player personal data seriously and implements technical and organisational measures appropriate to the sensitivity of the data we hold. The key security measures in place are described below.

5.1 Encryption in Transit

All data transmitted between your browser or mobile device and the crikcx platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This applies to every page of the crikcx website, including account registration, login, deposit and withdrawal pages, and KYC document upload. The crikcx SSL certificate is maintained and renewed on a regular schedule.

5.2 Encryption at Rest

Sensitive personal data — including KYC documents, payment account identifiers, and account passwords — is encrypted at rest in the crikcx database infrastructure using industry-standard encryption algorithms. Passwords are stored as salted cryptographic hashes and are never stored in plain text. crikcx staff do not have access to player passwords and will never ask for them.

5.3 Access Controls

Access to crikcx systems containing personal data is restricted to authorised staff on a strict need-to-know basis using role-based access controls. All staff with access to personal data undergo data protection training and are subject to confidentiality obligations. Access logs are maintained and reviewed regularly to detect any unauthorised access attempts.

5.4 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, crikcx will notify affected players without undue delay once the nature and scope of the breach has been established. The notification will describe the nature of the breach, the data affected, the steps crikcx has taken to contain it, and the steps players should take to protect themselves.

5.5 Data Storage Location

crikcx stores player data on secure servers. Where data is processed by third-party service providers outside Bangladesh, crikcx ensures that appropriate contractual safeguards are in place to ensure the data receives equivalent protection to that required by applicable Bangladeshi data protection standards.

6. Your Data Rights

As a crikcx player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the crikcx privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data that crikcx holds about you. Access requests will be fulfilled in a structured, machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data crikcx holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — including your contact email and phone number — can be updated directly from your crikcx account settings. For fields that require KYC re-verification (such as your legal name or date of birth), please contact support.

6.3 Right to Erasure

You may request that crikcx delete your personal data. We will fulfil erasure requests to the maximum extent possible, subject to our legal obligation to retain certain data categories (including financial transaction records and KYC documents) for the minimum periods required by applicable AML and gaming regulations. Where data cannot be fully deleted due to legal retention obligations, it will be restricted from active processing and deleted as soon as the retention period expires.

6.4 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may unsubscribe from crikcx marketing emails by clicking the unsubscribe link in any marketing email, by adjusting your communication preferences in your account settings, or by contacting support. Opting out of marketing will not affect your ability to use the crikcx platform or receive transactional communications (such as deposit confirmations and withdrawal notifications).

6.5 Right to Withdraw Consent

Where crikcx processes your data on the basis of your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.6 Right to Lodge a Complaint

If you believe that crikcx has processed your personal data in a manner that violates applicable data protection law, you have the right to lodge a complaint with the relevant data protection authority. We encourage you to contact the crikcx privacy team first so that we have the opportunity to address your concern directly and promptly.

7. Data Retention

crikcx retains personal data for as long as necessary to fulfil the purposes described in this policy, and for the minimum periods required by applicable legal and regulatory obligations. The table below provides a summary of our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Policy Updates and Contact

8.1 Policy Updates

crikcx may update this Privacy Policy from time to time to reflect changes in our data practices, changes to applicable law, or changes to the services we provide. When material changes are made, we will publish the updated policy on this page with a revised effective date and, where the changes are significant, will notify registered players by email to the address held on their crikcx account. The date at the top of this policy indicates when it was last reviewed and updated.

Your continued use of the crikcx platform after the publication of an updated Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the updated policy, you should cease using the crikcx platform and may request account closure by contacting support.

8.2 Children's Privacy

crikcx is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If you believe that a person under 18 has created a crikcx account or provided us with their personal data, please contact us immediately at [email protected] and we will take prompt action to close the account and delete the associated data.

8.3 Contact the crikcx Privacy Team

For all privacy-related enquiries, data rights requests, or complaints, please contact the crikcx privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response time: Acknowledgement within 48 hours; substantive response within 30 days
• Language: English preferred for all formal privacy correspondence