Privacy Policy for cricrex

1. Data We Collect

When you interact with cricrex — whether browsing the platform as a guest, registering a player account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal data. This section explains exactly what data we gather and why we gather it.

1.1 Account Registration Data

When you create a cricrex account, you provide us with identifying information that is necessary to establish and maintain your player profile. This includes:

• Full legal name, as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the mandatory 18+ age requirement.
• Email address, used for account communications, security alerts, and promotional messages (where opted in).
• Mobile phone number registered in Bangladesh, used for account verification and two-factor authentication.
• Residential address within Bangladesh.
• Username and encrypted password credentials.

1.2 Identity Verification Documents

As part of our know-your-customer (KYC) and age verification obligations, we may request copies of government-issued identity documents, including your National Identification Card (NID), passport, or birth certificate. These documents are processed by our compliance team and stored in an encrypted format. They are not accessible to third parties outside of our compliance and legal obligations.

1.3 Financial and Payment Data

To process deposits and withdrawals, we collect payment-related information including the mobile financial service account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) associated with your transactions. Importantly, cricrex does not store full card numbers, CVV codes, or mobile banking PINs. Sensitive payment credentials are processed exclusively by our certified payment processing partners and are never held on cricrex servers in unencrypted form.

We do retain transaction records, including deposit amounts, withdrawal requests, timestamps, and associated account references, for audit, compliance, and customer service purposes.

1.4 Gameplay and Wagering Data

All wagering activity conducted on cricrex is logged automatically. This includes game session records, bet amounts and outcomes, game types played, session durations, and any in-game events. This data is used for account integrity verification, responsible gaming monitoring, dispute resolution, and ongoing platform improvement.

1.5 Technical and Device Data

When you access cricrex, our servers automatically collect technical data about your connection and device. This includes:

• IP address and approximate geographic location derived from it.
• Browser type, version, and language settings.
• Device type (desktop, mobile, tablet) and operating system.
• Referring URL (the page you visited before cricrex, if applicable).
• Pages visited on cricrex, time spent, and navigation paths.
• Session timestamps and activity logs.

1.6 Communications Data

When you contact cricrex via email, live chat, or any other support channel, we retain records of those communications, including the content of your messages, your contact details, the date and time of contact, and the resolution provided. This data is used for quality assurance, training, and to ensure continuity of support.

2. How We Use Your Data

cricrex uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or without a lawful basis for doing so.

Purpose	Data Used	Lawful Basis
Account creation and management	Registration data, contact details	Contractual necessity
Age and identity verification (KYC)	NID, passport, date of birth	Legal obligation
Processing deposits and withdrawals	Payment data, transaction records	Contractual necessity
Fraud prevention and security monitoring	Device data, IP address, transaction history	Legitimate interest
Responsible gaming monitoring	Gameplay data, session logs, deposit history	Legal obligation & legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity
Platform analytics and improvement	Technical data, navigation logs (anonymised)	Legitimate interest
Promotional communications (opt-in)	Email address, game preferences	Consent
Legal and regulatory compliance	All categories as required	Legal obligation

Marketing Communications

If you have opted in to receive promotional communications from cricrex, we may send you emails or notifications about bonuses, seasonal promotions (such as those tied to BPL season, Eid, Pohela Boishakh, or Victory Day), new game launches, and platform updates. You may withdraw your consent to marketing communications at any time by contacting support@cricrex or by using the unsubscribe option included in every marketing email. Withdrawal of marketing consent does not affect the processing of data for other lawful purposes.

3. Cookies & Tracking

cricrex uses cookies and similar tracking technologies to ensure the platform functions correctly and to understand how users interact with it. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot be used to access files on your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and display preferences, and ensure that secure areas of the site operate as intended. You cannot opt out of strictly necessary cookies while using cricrex.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users navigate cricrex — which pages are visited most frequently, where users spend the most time, and where errors occur. This information is used solely to improve the platform. No personally identifiable information is included in these analytics reports.
• Functional Cookies: These cookies remember your in-platform preferences, such as your preferred deposit method or notification settings, to provide a more personalised and convenient experience on return visits.

Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. You can set your browser to notify you when a cookie is placed, to block third-party cookies, or to delete cookies on exit. Please note that disabling certain cookies may affect the functionality of cricrex — in particular, disabling strictly necessary cookies will prevent you from remaining logged in to your account. Detailed instructions for managing cookies in the most commonly used browsers are available in each browser's help documentation.

4. Data Sharing & Disclosure

cricrex does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

4.1 Service Providers and Technology Partners

We share data with carefully selected third-party providers who support the operation of cricrex. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard infrastructure providers), game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), identity verification services, cloud hosting providers, and customer support software providers. Each service provider receives only the minimum data necessary for their specific function and is contractually prohibited from using that data for any other purpose.

4.2 Legal and Regulatory Disclosure

cricrex may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies if required to do so by law, court order, or regulatory directive. We may also disclose data where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the rights or safety of our users or staff, or respond to a verified legal request. Where permitted by law, we will notify you of such a disclosure request.

4.3 Anti-Money Laundering Obligations

As part of our commitment to operating a lawful platform, cricrex may be required to report certain financial activity to relevant authorities as part of anti-money laundering (AML) compliance. In such cases, personal and transactional data may be disclosed to the extent required by applicable law without prior notice to the affected player.

4.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving cricrex, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, you will be notified via your registered email address prior to any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

5. Data Retention

cricrex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of the account and for a minimum of 5 years following permanent account closure, in line with standard financial record-keeping requirements.
• Identity verification documents (KYC): Retained for a minimum of 5 years following account closure or the date of the last verified transaction, whichever is later.
• Transaction and payment records: Retained for a minimum of 5 years to comply with financial regulations and AML obligations.
• Gameplay and wagering logs: Retained for a minimum of 3 years for the purposes of dispute resolution, responsible gaming monitoring, and platform audit trails.
• Customer support communications: Retained for 2 years from the date of the last interaction, or longer where the communication relates to an ongoing dispute or legal matter.
• Technical and device data (anonymised analytics): Retained in anonymised form indefinitely for aggregate platform analysis. Non-anonymised technical logs are retained for up to 12 months.
• Marketing consent records: Retained until consent is withdrawn, plus an additional 12 months as evidence of compliance.

When personal data is no longer required and no legal obligation exists to retain it, cricrex will securely delete or anonymise it in accordance with our internal data disposal procedures.

6. Data Security

cricrex takes the security of your personal data seriously. We implement a combination of technical, administrative, and physical security measures designed to protect your data against unauthorised access, alteration, disclosure, or destruction.

Technical Safeguards

• SSL/TLS encryption on all data transmissions between your browser or device and our servers.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms.
• Encrypted storage of identity verification documents.
• Firewalls, intrusion detection systems, and access control lists to restrict unauthorised network access.
• Regular security patching and vulnerability assessments on all platform components.

Administrative Safeguards

• Role-based access controls limiting staff access to personal data to only what is required for their specific job function.
• Mandatory data protection training for all staff who handle personal information.
• Confidentiality obligations binding all employees, contractors, and service providers who access player data.
• Periodic internal audits of data handling practices and access logs.

Data Breach Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, cricrex will notify affected users via their registered email address without undue delay. Our security team maintains an incident response plan designed to contain, assess, and remediate any breach as quickly as possible. Despite our best efforts, no digital platform can guarantee absolute security, and you are responsible for keeping your own account credentials confidential.

7. Your Privacy Rights

As a user of cricrex, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to support@cricrex from the email address registered to your account. We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that cricrex holds about you, along with information about how it is used and who it is shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some account details directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to legal and regulatory retention obligations — we cannot delete data we are required by law to retain.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format, or that we transmit it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be able to demonstrate that our legitimate interests override your objection in certain circumstances.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

8. Policy Updates & Contact

cricrex reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will update the effective date displayed at the top of this document and, where appropriate, notify registered players via their registered email address. Your continued use of cricrex after any update to this policy constitutes acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cricrex handles your personal data, please contact our privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

• Email: support@cricrex (plain text — not a clickable link)
• Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests.
• Language: All communications regarding this policy are conducted in English.