cricikex Privacy Policy

1. Data We Collect

cricikex collects personal data that is necessary to provide a safe, fair and personalised gaming experience. We collect data only through lawful means and only to the extent required for the purposes described in this Privacy Policy. The categories of data we collect are set out below.

1.1 Identity and Contact Data

When you register an account on cricikex, we collect your full legal name, date of birth, email address, and mobile number. Where verification is required, we may also request a copy of your National Identity Card (NID), passport or other government-issued document. This data is used to verify your identity, confirm you meet the 18+ age requirement, and establish your account.

1.2 Financial and Payment Data

To process deposits and withdrawals in BDT, we collect the mobile wallet numbers or bank account details you provide when using payment methods such as bKash, Nagad, Rocket, Upay, Visa and Mastercard. We do not store full card numbers or mobile banking PINs on our servers. Payment credentials are handled directly by the relevant payment processor using their own security infrastructure.

1.3 Transaction and Gaming Data

We maintain records of all deposits, withdrawals, bets placed, games played, bonus claims and account balance history. This data is used for account management, fraud prevention, regulatory compliance, dispute resolution and to personalise your experience on the Platform.

1.4 Technical and Device Data

When you access cricikex, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited and session duration. This information is used to maintain Platform security, detect suspicious activity and optimise Platform performance.

1.5 Communications Data

If you contact our support team by email or live chat, we retain a record of that correspondence, including the content of your messages and our responses. This allows us to maintain continuity of support, resolve disputes and improve service quality.

1.6 Data Collected from Third Parties

In some circumstances we may receive data about you from third-party identity verification providers, fraud prevention agencies, or payment processors. This data is used solely to verify your identity, assess account risk, and comply with our legal obligations. We do not purchase data lists from third-party marketing companies.

2. How We Use Your Data

cricikex uses the personal data we collect for the following specific purposes. We process your data only where we have a legitimate lawful basis for doing so, which may include performance of a contract, compliance with a legal obligation, protection of vital interests, or our legitimate business interests where these do not override your fundamental rights.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated processes are used to flag account activity (for example, for fraud or responsible gaming purposes), a member of our compliance team reviews all resulting actions before they are applied to your account.

3. Data Sharing and Disclosure

cricikex does not sell, rent or trade your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent strictly necessary for each stated purpose.

3.1 Payment Processors

To facilitate deposits and withdrawals, we share necessary payment details with our approved payment partners, including the operators of bKash, Nagad, Rocket and Upay mobile financial services, as well as Visa and Mastercard processing networks. These providers are bound by their own data protection obligations and are permitted to use your data only for the purpose of processing the transaction in question.

3.2 Identity Verification Providers

Where identity verification is required, we may share relevant personal data with approved Know Your Customer (KYC) and anti-money laundering (AML) service providers. These providers verify your identity against government databases and fraud watchlists. All such providers are contractually required to maintain appropriate security standards and are prohibited from using your data for any secondary purpose.

3.3 Game Software Providers

Games on cricikex are powered by licensed software providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe and Ezugi. To deliver game functionality, certain anonymised session identifiers may be passed to game servers operated by these providers. We do not share your full identity or financial details with game providers beyond what is required for the delivery of the game service.

3.4 Legal and Regulatory Authorities

cricikex will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities in Bangladesh when required to do so by law, court order, or legitimate regulatory demand. This includes reporting obligations under applicable anti-money laundering legislation and cooperation with the Bangladesh Financial Intelligence Unit (BFIU).

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the cricikex business, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4. Cookies and Tracking

cricikex uses cookies and similar tracking technologies to operate core Platform functions, maintain security, and improve your experience. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies without losing access to core Platform features such as your account dashboard, cashier, and game lobby.

4.2 Analytics and Performance Cookies

We use first-party analytics cookies to understand how players navigate the Platform, which pages are most visited, and where technical issues may be occurring. This data is aggregated and anonymised and is used solely to improve Platform performance and user experience. We do not share analytics data with third-party advertising networks.

4.3 Functional Cookies

Functional cookies remember your preferences such as language settings, display preferences and previously selected payment methods. These cookies make your experience smoother by reducing the need to re-enter preferences on each visit.

4.4 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including those commonly used in Bangladesh on Android and iOS devices — allow you to view, delete and block cookies on a per-site basis. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform but will not prevent you from accessing core gaming features.

5. Data Retention

cricikex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory or contractual obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. If you request deletion of your account prior to the expiry of a mandatory retention period, we will restrict active processing of your data while retaining it solely for the period required by law.

6. Your Privacy Rights

As a player on cricikex, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at support@cricikex with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Upon a verified access request, we will provide a structured summary of your data in a readable format, together with information about how and why it is being processed.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly from your profile settings. For data that cannot be self-corrected (such as verified identity documents), please contact support.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where you object to processing on the basis of legitimate interests and we cannot demonstrate overriding grounds. Note that mandatory legal retention periods (see Section 5) may prevent immediate erasure of some categories of data.

6.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, we will continue to store your data but will not actively process it for other purposes.

6.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. You may also request that this data be transmitted directly to another controller where technically feasible.

6.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise or defence of legal claims.

7. Data Security Measures

cricikex implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system can guarantee absolute security, the measures below reflect our commitment to industry-standard data protection practices.

7.1 Encryption

All data in transit between your browser or mobile application and cricikex servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys. Sensitive data at rest — including identity documents and payment records — is encrypted using AES-256 encryption in our secure storage infrastructure.

7.2 Access Controls

Access to player personal data within the cricikex organisation is strictly controlled on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations. Administrative access to production systems requires multi-factor authentication and is logged and audited.

7.3 Fraud Monitoring

We operate continuous automated monitoring of account activity to detect unusual patterns that may indicate fraud, account takeover, or money laundering activity. Suspicious activity triggers an immediate review by our security team. Players are encouraged to report any suspected unauthorised access to their account by contacting support@cricikex immediately.

7.4 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights, cricikex will notify affected players without undue delay, and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.

7.5 Third-Party Security Standards

All third-party service providers who process personal data on behalf of cricikex are subject to contractual data processing agreements that require them to maintain security standards at least equivalent to our own. We conduct periodic assessments of key suppliers to verify compliance.

8. Policy Updates and Contact

8.1 Changes to This Privacy Policy

cricikex reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new type of third-party sharing — we will notify you by email to your registered address and/or by a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after that date constitutes acceptance of the revised policy.

Minor changes (such as typographical corrections, clarifications, or updates to reflect changes in our legal name or contact details) may be made without advance notice. The "Effective Date" at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how we protect your information.

8.2 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how cricikex handles your personal information, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email (plain text — not a clickable link): support@cricikex
• Subject line for privacy matters: "Privacy Rights Request" or "Privacy Policy Enquiry"
• Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
• Languages supported: English

8.3 Governing Framework

This Privacy Policy is governed by the laws applicable in the jurisdiction in which cricikex operates. We are committed to processing personal data in a manner consistent with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality. Our privacy practices are reviewed at least annually and updated whenever changes in law, technology or our business operations require it.