Privacy Policy of
crikkex

When you register for an account on crikkex, use our platform, make a deposit or withdrawal, or contact our support team, we collect personal data about you. The data we collect falls into the following categories:

Identity and Contact Data: This includes your full legal name, date of birth, gender (where voluntarily provided), nationality, Bangladesh National ID (NID) card number or passport number, residential address in Bangladesh, and the mobile number registered to your crikkex account. This data is collected at registration and during Know Your Customer (KYC) verification. Accurate identity data is required in order to verify your age, prevent fraud, and comply with anti-money laundering (AML) obligations.

Account and Login Data: This includes your chosen username, encrypted password hash, security question responses (if set), the date and time of each login, the IP address from which you logged in, and the device identifier associated with your session. We use this data to secure your account, detect unauthorised access, and investigate security incidents.

Financial and Transaction Data: This includes records of all deposits and withdrawals processed through your account, including the amount, currency (BDT), payment method (e.g., bKash, Nagad, Rocket, Upay, bank transfer), transaction reference number, and timestamp. Partial payment identifiers (such as masked mobile wallet numbers) are stored for reconciliation and AML purposes. Full card numbers are never stored on crikkex servers.

Betting and Gaming Activity Data: This includes records of all bets placed, games played, stakes wagered, winnings credited, bonuses claimed, and any in-game events associated with your session. This data is used for account management, dispute resolution, bonus calculation, and responsible gaming monitoring.

Technical and Device Data: This includes your IP address, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time / UTC+6 where applicable), referring URL, and session duration. This data is collected automatically via server logs and analytics tools and is used to maintain platform performance and security.

Communications Data: If you contact crikkex via email, live chat, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and the support agent who responded. These records are used for quality assurance, dispute resolution, and regulatory record-keeping.

crikkex uses the personal data we collect for specific, documented purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account Creation and Management: To register your crikkex account, verify your identity and age, maintain your account settings, and provide you with access to the platform's betting and gaming features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank accounts, to reconcile transactions, and to investigate and resolve payment disputes.
• Legal and Regulatory Compliance: To meet our obligations under applicable AML regulations, to conduct Know Your Customer (KYC) checks, to respond to requests from competent authorities, and to maintain the records required by our international gaming licence.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, underage gambling, multi-accounting, bot usage, and other prohibited activities described in our Terms & Conditions.
• Responsible Gaming: To monitor betting and gaming patterns for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion decisions, and to provide you with the responsible gaming tools available on the platform.
• Customer Support: To respond to your enquiries, resolve complaints and disputes, and provide technical assistance related to your crikkex account.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, performance, and user experience of the crikkex platform.
• Marketing Communications (Consent-Based Only): To send you promotional emails and notifications about offers, bonuses, and events — such as BPL season promotions, Eid bonus campaigns, and T20 tournament offers — where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support@crikkex or by using the unsubscribe link in any marketing email.

crikkex does not use automated decision-making processes that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for investigation (e.g., fraud detection or responsible gaming alerts), a human member of our compliance or support team reviews the case before any account action is taken.

crikkex uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyse how the site is used. This section explains the types of cookies we use and how you can manage them.

Strictly Necessary Cookies: These cookies are essential for the crikkex platform to function. They maintain your authenticated session, store your language preference (English), and enable core features such as the game lobby, betting slip, and payment cashier. These cookies cannot be disabled without impairing your ability to use the platform.

Functional Cookies: These cookies remember your settings and preferences across sessions — for example, your preferred sports market display, your saved payment method shortcut, and your notification preferences. They improve your experience on return visits but are not essential to core functionality.

Analytics Cookies: crikkex uses analytics tools to understand how players interact with the platform — which pages are most visited, where users drop off during the registration process, and how game categories perform. Analytics data is aggregated and anonymised before review. Individual-level analytics data is not shared with any third party.

Security Cookies: Certain cookies and session tokens are used specifically for fraud detection and to prevent cross-site request forgery (CSRF) and session hijacking. These are strictly necessary and cannot be disabled.

Managing Your Cookie Preferences: You may configure your browser to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to crikkex and using the platform's core features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Most modern browsers on Android and iOS devices used widely in Bangladesh (Chrome, Firefox, Samsung Internet) provide accessible cookie management settings in their privacy menus.

Third-Party Cookies: crikkex may load game content provided by third-party studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming). These providers may set their own functional and analytics cookies when their game content is loaded within the crikkex platform. crikkex is not responsible for the cookie practices of third-party game providers; please refer to the relevant provider's own privacy documentation for details.

crikkex does not sell or rent your personal data to any third party. We may share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Service Providers: We share the minimum necessary transaction data with the payment providers you use to deposit and withdraw — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank — in order to process your transactions. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity Verification Partners: We may use third-party KYC verification services to validate your identity documents. These partners process your identity data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming receive session data necessary to initialise and operate their games within the crikkex platform. This data typically includes your session token and account tier. Your full identity data is not shared with game providers.
• Regulatory and Law Enforcement Authorities: crikkex will disclose personal data to competent governmental, regulatory, or law enforcement authorities when required to do so by applicable law, court order, or our obligations under our international gaming licence. We will notify affected account holders of such disclosures where legally permitted to do so.
• Anti-Fraud and AML Screening Services: We may share data with industry anti-fraud databases and AML screening services to detect and prevent financial crime. Access to these systems is governed by strict data-sharing agreements.
• Corporate Transactions: In the event that crikkex undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify affected users in advance of any such transfer and will ensure that the receiving entity provides equivalent data protection standards.

All third parties with whom crikkex shares personal data are required to implement appropriate technical and organisational security measures, and are prohibited from processing your data for any purpose beyond what has been specifically agreed with crikkex.

crikkex employs a layered security architecture to protect the personal and financial data of all players. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS): All data exchanged between your device and crikkex servers is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is kept current at all times.
• Data Encryption at Rest: Sensitive data fields — including NID numbers, password hashes, and payment identifiers — are encrypted at rest using AES-256 encryption in our database infrastructure.
• Password Hashing: User passwords are never stored in plain text. We apply a strong one-way cryptographic hash function with per-user salt values so that even in the event of a database breach, passwords cannot be recovered in usable form.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of system access necessary to perform their role. All internal data access is logged and audited.
• Intrusion Detection and Monitoring: Our infrastructure is monitored 24 hours a day, seven days a week for anomalous activity. Automated intrusion detection systems alert our security team to unusual login patterns, bulk data access attempts, and other indicators of compromise.
• Penetration Testing: crikkex engages independent security professionals to conduct regular penetration testing of our platform and infrastructure. Identified vulnerabilities are remediated in accordance with a documented patch management process.
• Incident Response: In the event of a data breach affecting player personal data, crikkex will notify affected account holders as promptly as reasonably practicable and will take all necessary steps to contain the breach, assess its scope, and prevent recurrence.

While crikkex implements robust security measures, no online platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their crikkex account and to enable any additional account security features available in their account settings.

crikkex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any outstanding disputes. The following retention periods apply to the main categories of personal data we hold:

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way crikkex handles your personal data, you are welcome to contact us using the details below. Our data protection team aims to respond to all privacy-related enquiries within 30 days of receipt. For urgent matters — such as a suspected unauthorised access to your account — please mark your message as urgent and our security team will prioritise your case.

Privacy and Data Protection Contact:
Email: support@crikkex
Subject Line: "Privacy Request — [Your Username]"
Response Time: Within 30 calendar days

When contacting us about a privacy rights request, please include your registered username, the email address associated with your crikkex account, and a clear description of your request or concern. We may ask you to complete identity verification before we can process your request, in order to protect your data from being disclosed to an unauthorised party.

Updates to This Privacy Policy: crikkex reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify active account holders by posting a notice on the crikkex platform and, where appropriate, by sending an email notification to your registered address. The updated policy will take effect from the date stated at the top of the revised document. Continued use of the crikkex platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed about how we protect your data.

This Privacy Policy was last reviewed and updated on 1 January 2026. crikkex is committed to maintaining accurate, transparent, and up-to-date privacy documentation for all players on our platform.