Data Protection & Privacy
Privacy Policy
At crikexx we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and the rights you hold over your own data.
All data transmitted between your device and the crikexx platform is protected using industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
Access to your personal data within crikexx systems is restricted on a strict need-to-know basis. Only authorised staff who require data access to perform their role may view your personal information, and all access is logged.
crikexx does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used exclusively for the purposes described in this Privacy Policy and for no other commercial purpose.
We follow a data-minimisation approach: we collect only the information that is strictly necessary to operate your account, verify your identity, process payments, and comply with our legal obligations. We do not collect data speculatively.
You may request a copy of the personal data we hold about you, ask us to correct inaccurate records, or request deletion of your data (subject to our legal retention obligations) at any time by contacting support@crikexx.
crikexx does not hold your personal data indefinitely. Retention periods are defined by the type of data and the legal basis for which it was collected. KYC documents are retained for a minimum of 5 years in line with anti-money laundering obligations.
Section 1
Data We Collect
crikexx collects personal data from you in several ways: directly when you register an account or contact our support team, automatically as you interact with the platform, and in some cases from trusted third parties such as payment processors or identity verification services. The categories of data we collect are detailed below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, National Identity Card (NID) number, passport number, driving licence number | Provided directly by you during registration and KYC verification |
| Contact Data | Mobile phone number, email address, residential address (including district, division, and postcode within Bangladesh) | Provided directly by you during registration and account updates |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account references, deposit and withdrawal transaction records, account balance history | Provided directly and captured automatically during transactions |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (BST UTC+6), session duration | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, wagers placed, bonus offers viewed or claimed, session start and end times, search queries on the platform | Collected automatically via server logs and analytics tools |
| Communication Data | Support ticket content, live chat transcripts, email correspondence, complaint records | Captured when you contact our support team |
| Verification Documents | Scanned or photographed copies of NID, passport, utility bills, bank statements, and payment method screenshots submitted during KYC | Provided directly by you during identity verification |
Players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar are all subject to the same data collection practices regardless of their geographic location within Bangladesh.
Section 2
How We Use Your Data
We process your personal data only where we have a lawful basis for doing so. The principal purposes for which crikexx uses your data are described below, together with the legal basis that justifies each processing activity.
- Account creation and management: We use your identity and contact data to create and maintain your player account, authenticate your login sessions, and communicate account-related notices to you. This is necessary to perform our contract with you.
- Age and identity verification (KYC): We are obligated to verify that all players are aged 18 or above before permitting withdrawals. KYC processing is a legal obligation and a condition of operating a responsible gaming platform. Failure to complete KYC will result in withdrawal restrictions as detailed in our Terms & Conditions.
- Payment processing: Your financial data is used to credit deposits to your account balance, process withdrawal requests to your nominated MFS wallet or bank account, and maintain an accurate transaction history for dispute resolution purposes.
- Fraud prevention and security: Technical data including IP address, device fingerprint, and login patterns is analysed to detect and prevent fraudulent activity, account takeover attempts, multi-accounting, and money laundering. This processing is in our legitimate interest and in the interest of the wider player community.
- Regulatory compliance and anti-money laundering: We are required to maintain records of certain transactions and player data in compliance with applicable anti-money laundering obligations. This is a legal obligation that supersedes any right to erasure for the applicable data during the mandatory retention period.
- Customer support: Communication data from support interactions is used to resolve your enquiries, investigate complaints, and improve the quality of our support service. Records of support interactions are retained to provide a consistent service history.
- Personalisation and promotions: With your consent (obtained at registration), we may use your usage data and game preferences to suggest relevant games, offer personalised bonus promotions, and notify you of seasonal offers such as BPL season promotions, Eid bonus campaigns, and Pohela Boishakh special events.
- Responsible gaming monitoring: We use wagering patterns, session duration, and deposit frequency data to identify players who may be exhibiting signs of problem gambling. This monitoring is carried out in furtherance of our responsible gaming commitments and in the player's own interest.
- Platform improvement: Aggregated and anonymised usage data is used to analyse platform performance, identify popular games and features, and prioritise development efforts. This analysis does not identify any individual player.
Section 3
Cookies & Tracking
crikexx uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and understand how players interact with the site. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device.
- Session authentication — keeps you logged in during your visit
- Security tokens — protect against cross-site request forgery
- Load balancing — distributes traffic across platform servers
- Language and region preference storage
Essential cookies are necessary for the platform to function. They cannot be disabled without preventing access to core services.
- Page visit frequency and navigation paths
- Game load times and performance metrics
- Session duration and drop-off points
- Device and browser category breakdowns
Analytics data is aggregated and anonymised. No individual player is identified through analytics processing.
- Recently played games list
- Favourite games and saved filters
- Notification and display preferences
- Responsible gaming reminder settings
Preference cookies improve your experience by remembering your choices between sessions.
- Promotion impression and click tracking
- Bonus offer engagement metrics
- Referral source attribution
- Retargeting identifiers (consent-based only)
Marketing cookies are only placed with your consent. You may withdraw consent by contacting support.
Section 4
Data Sharing & Third Parties
crikexx does not sell your personal data. We share your data with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose. All third-party service providers who process data on our behalf are bound by confidentiality obligations and data processing agreements.
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum financial data required to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory obligations.
- Identity verification providers: Third-party KYC and document verification services may process your identity documents to confirm authenticity and cross-check against watchlists. These providers are contractually prohibited from using your data for any purpose other than verification.
- Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game servers that process wager data in real time. These providers receive only the game session data necessary to deliver the game outcome and do not receive your full personal profile.
- Fraud prevention and security services: Specialist fraud detection platforms may process your technical and behavioural data to flag suspicious activity patterns. This processing is in our legitimate interest and the interests of all players on the platform.
- Legal and regulatory authorities: crikexx may be required by law to disclose player data to relevant authorities in connection with investigations into fraud, money laundering, or other criminal activity. Such disclosures are made only in response to lawful requests and to the extent required by applicable law.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the crikexx business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.
Section 5
Data Security
The security of your personal data is a core operational priority at crikexx. We implement a layered security architecture designed to protect your information against unauthorised access, accidental loss, alteration, and disclosure. The principal security measures we maintain are outlined below.
All personal data stored in crikexx databases is encrypted at rest using AES-256 encryption. Data in transit between your device and our servers is protected by TLS 1.2 or higher at all times.
Our infrastructure is monitored around the clock by automated intrusion detection systems that flag anomalous access patterns. Security incidents are escalated to our technical team and investigated within 24 hours (BST).
Internal access to player data is role-restricted. Staff members access only the data their role requires, and all data access events are logged to a tamper-resistant audit trail reviewed by our compliance team.
crikexx engages independent security specialists to conduct periodic penetration testing of platform infrastructure and web application security. Findings are remediated within agreed timescales based on severity rating.
Player data is backed up daily to geographically separate secure storage. Backup data is subject to the same encryption and access control standards as live production data, and is tested for restoration integrity on a regular schedule.
In the event of a confirmed personal data breach that poses a risk to affected players, crikexx will notify affected players as promptly as practicable, describe the nature of the breach, and outline the steps being taken to contain and remediate the incident.
Section 6
Data Retention
crikexx retains your personal data for as long as is necessary for the purposes for which it was collected, and in any event for no longer than is required by applicable legal obligations. The retention periods set out below apply by default; longer periods may apply where required by law or where the data is relevant to ongoing legal proceedings.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Contract performance; AML obligation |
| KYC / identity documents | 5 years from account closure | Anti-money laundering legal obligation |
| Transaction records | 5 years from transaction date | Financial records and AML compliance |
| Support communications | 3 years from last interaction | Dispute resolution; service improvement |
| Technical / session logs | 12 months rolling | Security monitoring; fraud prevention |
| Marketing consent records | Duration of consent + 2 years | Proof of lawful marketing processing |
| Self-exclusion records | Permanent (indefinite) | Responsible gaming — prevent re-registration during exclusion |
| Anonymised analytics data | Indefinite (no personal identifiers) | Platform development and performance analysis |
When retention periods expire, personal data is securely deleted or anonymised using methods that render re-identification impossible. Where deletion is not immediately practicable due to backup cycle schedules, data is isolated from active processing until deletion can be completed.
Section 7
Your Privacy Rights
As a player on the crikexx platform, you hold certain rights with respect to your personal data. These rights are described below. To exercise any of these rights, please contact our data support team at support@crikexx with a clear description of your request. We will respond within 14 business days (BST, UTC+6).
- Right of access: You may request a copy of all personal data we hold about you. We will provide this in a commonly used, machine-readable format. Where the request is manifestly unfounded or excessive, a reasonable administrative fee may apply.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Identity data corrections may require you to submit updated verification documents.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — data we are required to retain by law cannot be erased on request during the mandatory retention period.
- Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of whether our legitimate interests override yours.
- Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that your personal data be transferred to you or to a nominated third party in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where we rely on your consent as the legal basis for processing (e.g., marketing communications, preference cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Right to object: You may object at any time to processing of your personal data that is based on our legitimate interests, including profiling carried out on that basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Section 8
Policy Updates & Contact
crikexx reviews this Privacy Policy periodically and updates it as necessary to reflect changes in our data practices, applicable legal requirements, or platform features. The effective date at the top of this document indicates when the current version entered into force.
Material changes to this Privacy Policy — for example, changes to the categories of data we collect, the purposes for which we process it, or the third parties with whom we share it — will be communicated to registered players via a notice displayed on the platform at login. Continued use of the platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms.
We encourage all players to review this Privacy Policy from time to time, particularly before making a deposit or initiating a withdrawal. The most current version is always available at crikexx/privacy-policy.
For all privacy-related requests including access requests, rectification, erasure, or complaints, contact our data support team:
Email:
support@crikexx
Response time: within 14 business days (BST, UTC+6)
Our customer support team is available around the clock to assist with account, payment, and privacy-related queries.
Operating Hours:
24 hours a day, 7 days a week
All times referenced in Bangladesh Standard Time (BST, UTC+6)
Ready to Play at crikexx?
Now that you understand how we protect your data, explore everything crikexx has to offer — from live cricket betting and classic slots to our full casino experience. Your privacy is protected every step of the way.