Privacy Policy — crikckex

Where you choose to provide additional optional information — for example, a city of residence when contacting support — that information is treated with the same level of protection as mandatory data and is used solely for the purpose stated at the point of collection.

crikckex processes your personal data for the following specific and documented purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or establishing a fresh legal basis.

2.1 Account Management and Platform Operation

Your identity and contact data are used to create and maintain your crikckex account, authenticate your login, reset your password, and manage account settings including responsible gaming limits. Without this processing, the Platform cannot function for you as a registered player.

2.2 Identity Verification and KYC Compliance

Bangladesh-based players are required to complete Know Your Customer (KYC) verification before their first withdrawal. crikckex uses your identity data — including NID number, date of birth, and selfie photograph — to confirm that you are who you say you are, that you are aged 18 or above, and that your account details match your payment method registration. This verification step protects both you and the integrity of the Platform.

2.3 Payment Processing

Financial data is used to process deposit requests, validate incoming transactions, execute withdrawal payments to your registered bKash, Nagad, Rocket, Upay, Visa, or Mastercard account, and maintain accurate transaction records. Payment data is also used to detect and investigate suspicious or potentially fraudulent transaction patterns.

2.4 Fraud Prevention and Security

Technical data (IP address, device fingerprint, browser characteristics) and behavioural data are analysed to detect account takeover attempts, bonus abuse, multi-accounting, and other security threats. Where suspicious activity is identified, crikckex may temporarily suspend account access while an investigation is conducted.

2.5 Responsible Gaming Monitoring

Gameplay data and session data are used by crikckex's responsible gaming systems to identify patterns that may indicate problem gambling behaviour, such as unusually long session durations, rapid deposit escalation, or repeated self-exclusion and re-registration. This monitoring is conducted in the interests of player welfare and does not result in targeted marketing.

2.6 Customer Support

Communications data is used to respond to your support enquiries, investigate complaints, and maintain a record of prior interactions so that support agents have the context needed to assist you effectively. Support records are retained in accordance with the data retention periods set out in Section 6.

2.7 Platform Improvement and Analytics

Aggregated and anonymised behavioural and technical data is used to understand how players use the Platform, identify usability issues, test new features, and improve overall platform performance. Where data used for analytics is genuinely anonymised — meaning it cannot be re-linked to any individual — it falls outside the scope of this Privacy Policy.

2.8 Legal and Regulatory Compliance

crikckex may be required to process and disclose your personal data in order to comply with legal obligations, respond to lawful requests from regulatory or law enforcement authorities, or enforce our Terms & Conditions and other platform policies.

crikckex processes your personal data on one or more of the following legal bases. The applicable basis depends on the specific purpose of the processing as described in Section 2.

• Contractual Necessity: Processing that is required to provide you with the services described in the crikckex Terms & Conditions — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to perform the contract between you and crikckex.
• Legal Obligation: KYC verification, anti-money-laundering checks, and retention of financial transaction records are carried out because crikckex is legally required to do so as an operator of a financial services platform.
• Legitimate Interests: Fraud detection, security monitoring, responsible gaming analysis, and platform analytics are carried out on the basis of crikckex's legitimate interest in operating a safe, secure, and fair platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Where crikckex sends you optional promotional communications — such as bonus offers, seasonal promotions tied to BPL, IPL, Eid, or Pohela Boishakh events — this is done on the basis of your consent. You may withdraw consent at any time by contacting support@crikckex or adjusting your communication preferences in Account Settings.

crikckex does not sell your personal data. We share your data only where necessary to deliver the Platform's services, meet legal obligations, or protect the security of the Platform and its players. The categories of third parties with whom we may share data are set out below.

4.1 Payment Service Providers

To process deposits and withdrawals, crikckex shares the minimum necessary transaction data with the relevant MFS provider (bKash, Nagad, Rocket, Upay) or card network (Visa, Mastercard). This typically includes the transaction amount, the account reference, and the timestamp. Your full NID details are never shared with payment providers. Each payment provider operates under its own privacy policy and terms of service.

4.2 Identity Verification Partners

crikckex may use a third-party KYC verification service to assist with automated NID document checking and liveness detection. Any such provider is bound by strict data processing agreements that prohibit them from using your identity data for any purpose other than completing the verification check requested by crikckex.

4.3 Game Content Providers

Games delivered through the crikckex Platform are supplied by third-party game studios and content providers. To deliver a game session, your account reference and session token are shared with the relevant provider. Game providers do not receive your full name, NID, mobile number, or financial data. Game providers include but are not limited to Pragmatic Play, Evolution Gaming, Spribe, and Ezugi.

4.4 Legal and Regulatory Authorities

crikckex may disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by law, by court order, or where crikckex reasonably believes that disclosure is necessary to prevent fraud, money laundering, or other criminal activity affecting the Platform or its players.

4.5 Business Transfers

In the event that crikckex undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may form part of the transferred assets. In such a case, crikckex will take all reasonable steps to ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Privacy Policy, and will notify affected players of the transfer in advance where required by law.

crikckex uses cookies and similar technologies to enable core platform functionality, remember your preferences, and analyse how players interact with the site. The following table describes the types of cookies we use and their purposes.

To manage your cookie preferences, you may adjust the settings in your web browser. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please note that blocking strictly necessary or security cookies will affect your ability to log in and use the crikckex Platform. crikckex does not use cookies to serve third-party advertising to you across other websites.

crikckex retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, taking into account our legal, accounting, and compliance obligations. The general retention periods applied by crikckex are as follows:

• Active Account Data (identity, contact, financial): Retained for the full duration of your account being active, plus a minimum of five (5) years following account closure. This retention period is required to meet financial record-keeping and anti-money-laundering obligations.
• KYC Documents (NID copies, selfie photographs): Retained for five (5) years following the date of verification, or five (5) years after account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Gameplay and Session Logs: Retained for two (2) years from the date of the session. Aggregated and anonymised gameplay statistics may be retained indefinitely as they no longer constitute personal data.
• Support Communications: Retained for three (3) years from the date of the last communication in a support thread.
• Marketing Consent Records: Retained for the duration of your active consent plus two (2) years following consent withdrawal, to demonstrate compliance with consent requirements.
• Security and Fraud Logs: Retained for up to three (3) years from the date of the logged event, or longer where an active investigation or legal proceeding requires the data to be preserved.

Upon expiry of the applicable retention period, crikckex will securely delete or permanently anonymise your personal data. Where deletion is not immediately possible due to technical constraints — for example, data held in backup archives — the data will be isolated from active processing until deletion is completed in the ordinary course of our scheduled backup purge cycle.

crikckex will respond to all verified privacy rights requests within 30 calendar days of receipt. Where a request is complex or where we receive a high volume of requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. There is no charge for making a privacy rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

To protect the security of your data, crikckex will verify your identity before processing any privacy rights request. Verification requires confirmation of your registered mobile number and, for requests involving sensitive data, submission of a current NID document.

If you have any questions, concerns, or complaints about how crikckex processes your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our support team using the details below. All data-related enquiries are handled by a designated privacy contact within our operations team.

How to Reach Us

Email all privacy-related enquiries to support@crikckex with the subject line "Privacy Request" or "Data Query". Our support team operates 24/7 at Bangladesh Standard Time (BST, UTC+6) and aims to acknowledge all privacy enquiries within one business day.

Complaints

If you are not satisfied with crikckex's response to a privacy concern, you have the right to escalate your complaint through the applicable dispute resolution process as described in the crikckex Terms & Conditions. crikckex takes all privacy complaints seriously and will investigate each matter thoroughly before issuing a final written response.

Policy Updates

crikckex reviews this Privacy Policy at least annually and updates it whenever our data practices change in a material way. When a material update is made, registered players will be notified by email to the address on record at least 7 calendar days before the change takes effect. The effective date shown at the top of this page reflects the date of the most recent revision. Continued use of the crikckex Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.