Privacy Policy — cricxex

1 Introduction

This Privacy Policy ("Policy") describes how cricxex ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal information provided by players and visitors ("you", "your") when using the cricxex website and all associated gaming services. The Policy applies to all users accessing the Platform from Bangladesh or from any other location.

By registering an account on cricxex or by continuing to use the Platform after this Policy has been updated, you confirm that you have read and understood how your personal data is handled. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact our support team to arrange account closure.

1.1 Who We Are

cricxex is an online gaming and sports betting platform serving the Bangladesh market. We operate live casino games, cricket and sports betting, slot machines, and crash games — all denominated in Bangladeshi Taka (৳) and accessible in the English language. Our platform is intended exclusively for players aged 18 and above.

1.2 Scope of This Policy

This Policy covers all personal data collected through:

• The cricxex website and any mobile-optimised interface.
• Account registration and KYC verification processes.
• Deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers.
• Customer support interactions via live chat and email.
• Promotional campaigns, bonus schemes, and loyalty programmes operated by cricxex.
• Cookies and analytics tools used to improve platform performance and user experience.

1.3 Changes to This Policy

cricxex reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via their registered email address. We encourage you to review this Policy periodically to remain informed about how we protect your data.

2 Data We Collect

cricxex collects personal data in several ways — directly from you when you register or interact with the Platform, automatically through technical systems as you use the site, and occasionally from third-party verification partners. Below is a comprehensive breakdown of the categories of data we collect and their sources.

2.1 Registration & Account Data

When you create a cricxex account, we collect the following information:

• Your full legal name.
• Date of birth (to verify you are aged 18 or above).
• Email address.
• Bangladeshi mobile phone number.
• Chosen username and encrypted password (passwords are never stored in plaintext).
• City or region within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is required before withdrawals are processed — you may be asked to submit:

• A copy of a valid government-issued National Identity Card (NID), passport, or birth certificate.
• Proof of ownership of your registered payment method (e.g., a screenshot confirming your bKash or Nagad account number matches your registered name).
• A selfie or live photo for identity confirmation, where required.

2.3 Financial Transaction Data

When you make a deposit or withdrawal, we record:

• The payment method used (bKash, Nagad, Rocket, Upay, or bank transfer).
• The transaction amount in Bangladeshi Taka (৳).
• The date, time, and reference number of the transaction.
• Your payment account identifier (e.g., bKash number), but never your full payment PIN or password.

2.4 Gaming & Behavioural Data

We automatically record data related to your gaming activity on the Platform, including:

• Games played, bets placed, outcomes, and session durations.
• Bonus offers claimed and wagering progress.
• Responsible gaming tool usage (e.g., deposit limit settings, self-exclusion requests).
• Login timestamps, session start and end times, and frequency of platform visits.

2.5 Technical & Device Data

Our systems automatically collect certain technical data when you access cricxex:

• IP address and approximate geographic location (country/city level).
• Device type, operating system, and browser version.
• Referring URL (the page or source that directed you to cricxex).
• Pages visited, features used, and time spent on each section of the Platform.

3 How We Use Your Data

cricxex processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose that is incompatible with those stated at the time of collection. The primary purposes for which we process your data are as follows:

3.1 Service Delivery

The core purpose of data processing on cricxex is to provide you with the gaming and betting services you have signed up for. This includes maintaining your player account, processing deposits and withdrawals in Bangladeshi Taka (৳), delivering game content from our studio partners (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt), and providing customer support via 24/7 live chat.

3.2 Identity Verification & Fraud Prevention

We use registration data and KYC documents to verify your identity and confirm you meet our age restriction of 18 years or above. Transaction data and device/IP information are used by our automated fraud detection systems to identify and investigate suspicious activity, including account takeover attempts, bonus abuse, and money laundering.

3.3 Responsible Gaming Monitoring

cricxex is committed to player welfare. We analyse gaming behaviour data — including session length, betting frequency, and deposit patterns — to identify players who may be showing signs of problem gambling. Where our systems flag a concern, our responsible gaming team may proactively reach out to the player. This processing is carried out in the player's vital interest and forms part of our duty of care obligations.

3.4 Legal & Regulatory Compliance

We are required to retain certain categories of data — particularly KYC documents and financial records — to comply with anti-money laundering (AML) best practices and to respond to any lawful requests from competent authorities. Financial transaction records are retained for a minimum of 7 years in line with standard compliance requirements.

3.5 Marketing Communications

With your consent, cricxex may send you promotional emails or in-platform notifications about new games, bonus offers, seasonal promotions (such as BPL season bonuses, Eid offers, or Pohela Boishakh promotions), and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting our support team. Withdrawing marketing consent does not affect your right to receive transactional or security-related communications about your account.

3.6 Platform Improvement & Analytics

Aggregated, anonymised usage data helps us understand how players interact with cricxex — which games are most popular, which pages receive the most visits, and where users encounter friction in the registration or payment flow. This data is used exclusively to improve the Platform and is not linked back to individual player identities in its analysed form.

4 Cookies & Tracking Technologies

cricxex uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to improve your overall experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators. Cookies set by cricxex are first-party cookies; cookies set by our service partners (such as analytics providers and game studios) are third-party cookies.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control cookie behaviour through your web browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site or global basis. Please be aware that disabling cookies — particularly strictly necessary and security cookies — may prevent parts of cricxex from functioning correctly and may prevent you from logging in to your account.

For guidance on managing cookies in commonly used browsers, refer to the help documentation of your specific browser (Chrome, Firefox, Safari, Edge, or Samsung Internet on Android).

5 Data Sharing & Third Parties

cricxex does not sell your personal data. We share data with third parties only to the limited extent necessary to operate the Platform, fulfil legal obligations, and protect users. All third-party partners who receive personal data from cricxex are bound by contractual data processing agreements that restrict how they may use the data.

5.1 Payment Service Providers

To process your deposits and withdrawals, cricxex shares necessary transaction data with our integrated payment service providers, including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks (such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank). The data shared is limited to what is required to complete the transaction — we do not share your gaming history or account behaviour with payment providers.

5.2 Game Studio Providers

When you play a live casino game or slot hosted by a studio partner (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, or NetEnt), a session token and your account identifier are transmitted to the studio's game server to initialise the game session and record the outcome. Studio partners process this data solely to deliver and verify the game result and are not permitted to use it for independent marketing or profiling purposes.

5.3 Identity Verification Partners

Where cricxex uses a third-party KYC verification service to assist with document authentication, your submitted identity documents may be shared with that service under strict data processing conditions. KYC partners are prohibited from retaining your documents beyond the verification period and may not use them for any purpose other than verifying your identity for cricxex.

5.4 Legal & Regulatory Disclosures

cricxex may disclose personal data to competent legal authorities, law enforcement agencies, or regulatory bodies where we are required to do so by law, where disclosure is necessary to prevent fraud or financial crime, or where disclosure is required to protect the safety of our players or staff. We will only disclose the minimum amount of data necessary to fulfil the legal requirement.

5.5 Business Transfers

In the event that cricxex undergoes a business reorganisation, merger, acquisition, or asset sale, your personal data may be transferred to the successor entity as part of that transaction. In such an event, we will notify affected players via their registered email address and publish an updated Privacy Policy reflecting any changes in data controller responsibilities.

6 Data Security

cricxex implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, theft, alteration, and disclosure. Security is not an afterthought at cricxex — it is built into every layer of the Platform's architecture.

6.1 Technical Security Measures

• SSL/TLS 1.3 Encryption: All data in transit between your device and our servers is encrypted using industry-standard SSL/TLS 1.3 protocols. Look for the padlock icon in your browser's address bar when visiting cricxex.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents and password hashes — is stored using strong encryption. Passwords are hashed using bcrypt and are never stored in recoverable plaintext.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Automated Threat Detection: Our infrastructure is monitored 24/7 by automated intrusion detection and anomaly-monitoring systems that flag unusual login patterns, transaction irregularities, and potential data breach indicators in real time.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff members who require access to player information to perform their roles are granted only the minimum permissions necessary.

6.2 Organisational Security Measures

• All staff members who handle personal data receive regular data protection and security training.
• Our data handling procedures are reviewed periodically to address emerging security threats and best practices.
• Third-party vendors and partners are subject to security assessments before being granted access to any cricxex systems or player data.

6.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, cricxex will act promptly to contain the breach, assess its scope and impact, and notify affected players as quickly as possible. Notifications will be sent to your registered email address and will include a clear description of what data was affected, what steps you should take to protect yourself, and what cricxex is doing to address the incident.

7 Your Privacy Rights

As a player on cricxex, you hold meaningful rights over your personal data. We are committed to honouring these rights promptly and without unnecessary obstruction. All data rights requests should be submitted via our 24/7 live chat or by emailing support@cricxex. We aim to respond to all rights requests within 30 calendar days of receipt.

7.1 Limitations on Rights

Some privacy rights are subject to limitations where overriding legal requirements apply. For example, we cannot delete financial transaction records that we are required to retain under anti-money laundering obligations, and we cannot delete KYC documents during the mandatory retention period following account closure. Where a rights request cannot be fully fulfilled, we will explain the specific reason clearly and in plain English.

7.2 Identity Verification for Rights Requests

To protect your data from unauthorised access, cricxex may ask you to verify your identity before processing a rights request. This typically involves confirming your registered email address, phone number, and one piece of account-identifying information. We will not process a data access or deletion request without first confirming the requester's identity.

8 Contact & Data Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to how cricxex handles your personal data, please reach out to our support and data team using the contact information below. All privacy-related enquiries are treated as high priority and are handled by dedicated personnel.

8.1 General Support

For everyday account queries, payment issues, or general questions about how your data is used:

• Live Chat: Available 24 hours a day, 7 days a week via the cricxex platform interface.
• Email: support@cricxex (plain text — not a clickable link). We aim to respond to all emails within one business day BST (UTC+6).

8.2 Data Privacy Requests

For formal data privacy requests — including access requests, rectification requests, erasure requests, and objections to processing — please contact us via email at support@cricxex with the subject line "Data Privacy Request" followed by a brief description of your request. Please include your registered username and the email address associated with your cricxex account so we can locate your records promptly.

8.3 Response Time Commitment

We acknowledge all privacy enquiries within 5 business days and provide substantive responses within 30 calendar days. For complex requests involving large volumes of data or legal analysis, we may take up to 60 calendar days in total, and will always inform you of the extended timeline before the initial 30-day window expires.