crikrex Privacy
Policy

1. Information We Collect

crikrex collects personal data about you through several channels: directly from you when you register an account or use the platform, automatically through your use of our website and mobile services, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are described in detail below.

1.1 Registration Data

When you create a crikrex account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are aged 18 or above)
• Email address and mobile phone number
• Residential address (street, city, district, and postcode within Bangladesh)
• Preferred username and encrypted account password
• Preferred currency (Bangladeshi Taka, ৳)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that all players are aged 18 or above, crikrex may collect the following verification documents:

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or mobile financial service statement dated within 90 days)
• Proof of payment method (bKash, Nagad, Rocket, or Upay transaction screenshot or account statement)
• Selfie photograph holding your identity document, where required for enhanced verification

1.3 Financial Transaction Data

Every deposit, withdrawal, bonus credit, and wager settlement processed through crikrex generates a transaction record. We retain the following financial data:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳)
• Mobile financial service account reference (bKash, Nagad, Rocket, or Upay) — stored as a masked reference, never as a full PIN or password
• Transaction timestamps (Bangladesh Standard Time, UTC+6)
• Bonus claims, wagering activity, and associated game session records

1.4 Technical and Usage Data

When you access the crikrex platform via a web browser or mobile device, our servers and analytics systems automatically collect:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, features used, and duration of sessions on the platform
• Referral source (how you arrived at crikrex — e.g., direct URL, search engine)
• Cookie identifiers and session tokens (see Section 4 — Cookies)

1.5 Communications Data

If you contact crikrex via live chat, email, or WhatsApp support, we retain a record of those communications, including the content of your messages, the date and time of contact, and the outcome of any support interaction. This data is used to resolve disputes, improve service quality, and maintain an audit trail of support activity.

2. How We Use Your Data

crikrex processes your personal data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are: performance of a contract (operating your player account), compliance with legal obligations (KYC/AML requirements), legitimate interests (fraud prevention, platform security), and — where applicable — your explicit consent (marketing communications). The table below maps each processing purpose to its legal basis.

2.1 Responsible Gaming Monitoring

crikrex uses your gameplay data — including deposit frequency, session duration, wagering patterns, and self-imposed limit settings — to monitor for indicators of problem gambling. Where such indicators are identified, our responsible gaming team may contact you proactively with information about support resources. This processing is carried out in your interest and forms part of our commitment to safe, responsible gaming for all players in Bangladesh.

2.2 Marketing Communications

With your explicit consent, crikrex may send you promotional communications relating to new games, seasonal offers (such as BPL or Eid promotions), bonus credits, and platform updates. These communications may be delivered via email, SMS, or WhatsApp to the contact details you provided at registration. You may withdraw your consent to marketing communications at any time by contacting the crikrex support team or updating your preferences in the account settings panel. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3. Data Sharing & Third Parties

crikrex does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only with parties who are contractually bound to handle your data in accordance with applicable privacy standards.

3.1 Game Studio Partners

To deliver casino games and sports betting markets on the crikrex platform, we work with certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive limited technical data (such as session tokens and game identifiers) necessary to deliver and record game sessions. They do not receive your full personal profile, financial transaction history, or identity documents.

3.2 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, crikrex shares transaction reference data with the relevant mobile financial service providers. This sharing is strictly limited to the information required to complete the specific transaction and does not include your full crikrex account profile or KYC documents. Payment partners process this data under their own privacy policies and regulatory frameworks.

3.3 Identity Verification Providers

crikrex may use third-party KYC and identity verification service providers to assist in verifying the identity documents you submit. These providers act as data processors under crikrex's instruction and are contractually required to process your verification data only for the purpose of completing the identity check requested by crikrex.

3.4 Analytics and Platform Technology Providers

We use analytics and infrastructure technology providers to monitor platform performance, detect technical issues, and understand how players navigate the crikrex website. These providers may process technical and usage data (such as IP addresses and session data) on our behalf. They are not permitted to use this data for their own purposes.

3.5 Legal and Regulatory Disclosure

crikrex may disclose your personal data to competent authorities, law enforcement bodies, or courts where required by applicable law, court order, or regulatory instruction. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement and will, where legally permissible, notify you of such disclosure.

4. Cookies & Tracking Technologies

crikrex uses cookies and similar tracking technologies (such as web beacons and local storage) on its website to provide a functional, secure, and personalised experience for players in Bangladesh. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on return visits and to remember certain preferences or session states. Cookies do not contain executable code and cannot access other files stored on your device.

4.2 Types of Cookies Used by crikrex

4.3 Third-Party Cookies

Game studio partners (including Pragmatic Play, Evolution Gaming, and Spribe) may place their own session-scoped cookies when you load a game within the crikrex platform. These cookies are strictly necessary to establish the game session and do not track your behaviour across other websites. crikrex does not permit third-party advertising networks to place cookies on the crikrex website.

4.4 Managing Your Cookie Preferences

You may configure your browser to refuse, delete, or be notified before cookies are set. Note that disabling strictly necessary cookies will prevent you from logging in to your crikrex account and using core platform features. Most modern browsers (Chrome, Firefox, Safari, Edge, Opera Mini) include cookie management settings accessible via the browser's privacy or settings menu. For mobile browsers commonly used in Bangladesh, these settings are typically found under Settings > Privacy & Security.

5. Data Security Measures

crikrex implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no system can guarantee absolute security, we continuously review and update our security posture to address emerging threats.

5.1 Encryption in Transit and at Rest

All data transmitted between your browser or mobile device and the crikrex platform is encrypted using TLS 1.2 or higher (SSL). Account passwords are stored as salted cryptographic hashes — plain-text passwords are never stored or transmitted by crikrex. KYC documents are encrypted at rest on access-controlled storage systems.

5.2 Access Controls

Access to player personal data within crikrex's internal systems is restricted on a strict need-to-know basis. Support agents, compliance officers, and technical staff are granted access only to the categories of data required for their specific role. All internal data access is logged and subject to periodic audit.

5.3 Fraud Detection Systems

crikrex operates automated fraud detection and account monitoring systems that analyse transaction patterns, login behaviour, and device fingerprints in real time. These systems help identify and respond to suspicious activity — including attempted account takeover, payment fraud, and bonus abuse — before material harm occurs.

5.4 Data Breach Response

In the event that crikrex identifies or is made aware of a personal data breach that poses a risk to your rights and freedoms, we will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notification will be sent to the email address registered on your crikrex account and will include a description of the nature of the breach, the data affected, and the steps being taken to address it.

6. Data Retention Policy

crikrex retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below represent our standard practices. Where legal or regulatory requirements mandate a longer retention period, those requirements take precedence.

Upon expiry of the applicable retention period, crikrex will securely delete or anonymise your personal data such that it can no longer be linked back to you as an individual. Anonymised, aggregated data (such as statistical usage reports) may be retained indefinitely as it no longer constitutes personal data.

7. Your Privacy Rights

As a player registered with crikrex, you hold a number of rights in relation to the personal data we hold about you. crikrex is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles. The rights available to you are described below.

• Right of Access: You may request a copy of all personal data that crikrex holds about you. We will provide this in a structured, commonly used format within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update basic profile information directly from your account settings panel; for changes to identity or KYC data, please contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request that crikrex delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that legal retention obligations (see Section 6) may mean that a full erasure cannot be carried out immediately.
• Right to Restrict Processing: You may request that crikrex restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service.
• Right to Object: You may object at any time to processing based on crikrex's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, contact the crikrex privacy team via live chat on-site or by email at support at crikrex.net with the subject line "Privacy Rights Request". To protect your data, we will need to verify your identity before processing your request. We aim to respond to all verified privacy rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days — in which case we will notify you of the extension within the initial 30-day period.

8. Contact & Privacy Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way crikrex handles your personal data, please use one of the contact channels below. Our support team is available 24 hours a day, seven days a week via on-site live chat, and responds to email inquiries during Bangladesh Standard Time business hours.

• Live Chat: Available on-site at crikrex.net — 24/7
• Email: support at crikrex.net (subject line: "Privacy Rights Request")
• WhatsApp: +880 1700 000000
• Response time: Within 2 business days for email; immediate for live chat
• Support hours: 08:00 – 22:00 BST (UTC+6) for email; 24/7 for live chat

8.1 Policy Updates

crikrex reserves the right to update or revise this Privacy Policy at any time. Where material changes are made — for example, changes to the categories of data we collect, how we share data, or the rights available to you — we will provide reasonable notice via the crikrex platform and, where practicable, by email to your registered address. The "Effective" date at the top of this policy reflects the date on which the current version became applicable. We encourage you to review this policy periodically to remain informed about how crikrex protects your personal information.

8.2 Governing Language

This Privacy Policy is written in English. The English-language version is the only authoritative and legally binding version. Any translation provided by crikrex for informational convenience does not create additional rights or obligations beyond those set out in the English-language text.