crikiex Privacy
Policy

1. Information We Collect

crikiex collects personal data through several channels: directly from you during account registration and ongoing use of the platform, automatically through your device and browser when you visit the site, and from third-party payment processors involved in deposit and withdrawal transactions. The categories of data we collect are set out below.

1.1 Information You Provide Directly

When you register a crikiex account, make a deposit, submit a withdrawal request, contact our support team, or respond to a promotional offer, you may provide us with the following types of personal information:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile phone number, residential address (city and district within Bangladesh).
• Identity verification documents: Bangladesh National ID card (NID) number, a selfie photograph submitted for KYC purposes, and any additional supporting documents we may request under our verification procedures.
• Financial data: Mobile wallet account numbers associated with bKash, Nagad, Rocket, or Upay used for deposits and withdrawals. We do not store full payment credentials; these are handled directly by the payment provider.
• Communications data: The content of messages sent to our support team via live chat or email, including any attachments you choose to share.
• Responsible gaming data: Information about deposit limits, cool-off periods, or self-exclusion requests that you submit through our responsible gaming tools.

1.2 Information Collected Automatically

When you access the crikiex website or mobile platform, certain technical data is collected automatically by our systems. This includes:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, game sessions played, betting activity, click patterns, and navigation paths within the platform.
• Session data: Login timestamps, session duration, and logout events.
• Location data: Approximate geographic location derived from your IP address. crikiex does not collect precise GPS coordinates.

1.3 Information from Third Parties

We may receive limited data about you from third-party payment processors when you initiate a deposit or withdrawal. This is typically a transaction reference number, the amount, and a status code. We do not receive your full mobile wallet PIN or password from any payment provider.

2. How We Use Your Data

crikiex uses your personal data only for clearly defined purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises our primary processing activities.

2.1 Marketing Communications

crikiex will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (such as Eid or BPL tournament promotions), and new game launches if you have opted in to receive such communications during or after registration. You may withdraw this consent at any time by contacting our support team or using the unsubscribe option in any marketing email. Withdrawing consent for marketing does not affect your ability to use the crikiex platform.

2.2 Automated Decision-Making

crikiex uses automated systems to detect unusual account activity, potential fraud, and patterns consistent with problem gambling behaviour. Where an automated system flags an account, a member of our team will review the case before any significant action (such as account restriction) is taken. You have the right to request human review of any decision that significantly affects your account.

3. Data Sharing & Third Parties

crikiex does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose.

3.1 Payment Processors

To process your deposits and withdrawals, crikiex shares necessary transaction data with our supported payment partners, which currently include bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and is responsible for the data it holds in relation to your wallet account. crikiex shares only the minimum information required to initiate and confirm each transaction.

3.2 Game and Software Providers

crikiex works with third-party game studios and software providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others — to deliver its casino and betting content. These providers may collect anonymised gameplay data (such as round IDs and bet outcomes) for the purposes of game integrity verification and technical auditing. They do not receive your full personal profile or payment details.

3.3 Platform Infrastructure Providers

crikiex uses reputable third-party cloud hosting and infrastructure providers to operate the platform. These providers process data on our behalf as data processors under contractual agreements that require them to protect your information and use it only as directed by crikiex.

3.4 Legal and Regulatory Disclosure

crikiex may disclose your personal data to law enforcement, regulatory authorities, or other government bodies if required to do so by applicable law, court order, or in response to a lawful request. We will notify you of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event that crikiex undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy as a result of such a transfer.

4. Cookies & Tracking Technologies

The crikiex website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to understand how players interact with different areas of the site. This section explains what types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember certain information about your visit — such as your session state and preferences — across page loads and return visits. Cookies do not give us access to your device or any information beyond what the cookie itself stores.

4.2 Types of Cookies We Use

4.3 Managing Your Cookie Preferences

You can control and delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies stored by specific sites. Please note that disabling essential session cookies will prevent you from logging into your crikiex account and using core platform features. Disabling analytics or preference cookies will not affect your ability to play games or make transactions.

4.4 No Third-Party Tracking Cookies

crikiex does not permit third-party advertising networks to place tracking cookies on the crikiex domain. We do not use pixel tracking technologies for cross-site behavioural advertising. Any third-party scripts present on the platform are limited to those necessary for payment processing and game delivery, and these are subject to strict contractual data protection requirements.

5. Data Retention & Storage

5.1 Retention Periods

crikiex retains your personal data for as long as your account remains active and for a defined period after account closure. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the full duration of your account, plus a minimum of 5 years following account closure to comply with standard anti-money-laundering and fraud prevention obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of account activity plus 5 years post-closure. Documents are held in encrypted storage and accessed only when required for compliance or dispute purposes.
• Customer support communications: Retained for 3 years from the date of each interaction to support dispute resolution and quality assurance.
• Usage and session data: Retained in anonymised or aggregated form for up to 24 months for platform analytics purposes.
• Marketing consent records: Retained for the duration of any active marketing relationship plus 3 years, to demonstrate compliance with consent obligations.

5.2 Data Storage Location

crikiex stores personal data on secure cloud infrastructure. All data storage environments are protected by encryption at rest and in transit. Access to personal data is restricted to authorised crikiex personnel and contracted service providers who require access to perform their specific function. Strict role-based access controls are enforced across all data systems.

5.3 Data Deletion

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request early deletion of your data (see Section 6), we will delete what we are legally permitted to delete and explain any data we are required to retain and for how long.

6. Your Privacy Rights

crikiex respects your rights over your own personal data. The following rights are available to all registered players on the platform. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request". We will verify your identity before processing any request and respond within a reasonable timeframe.

6.1 Right of Access

You have the right to request a copy of the personal data crikiex holds about you. We will provide this in a clear, readable format. This includes your account details, KYC status, transaction history summary, and any support communications linked to your account.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered mobile number or email address has changed, you may update it through your account settings or by contacting support.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where you object to its processing and no overriding legitimate interest applies. Please note that certain data must be retained for legal compliance reasons and cannot be deleted on request — we will inform you clearly of anything we are required to keep.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or where you have objected to processing and we are considering whether our legitimate interests override your objection.

6.5 Right to Object

You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though in such cases we will assess whether our interests are overridden by yours. If you object to marketing, we will cease sending marketing communications immediately.

6.6 Right to Data Portability

Where your data has been processed on the basis of consent or contract, and processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON).

7. Data Security Measures

Protecting the personal data of our players is a core operational priority at crikiex. We implement a layered security approach that combines technical controls, procedural safeguards, and staff training to minimise the risk of data loss, unauthorised access, or breach.

7.1 Technical Safeguards

• TLS 1.3 encryption is applied to all data transmitted between your device and the crikiex platform.
• AES-256 encryption at rest is used for all stored personal data and identity documents.
• Two-factor authentication (2FA) is available for player accounts and is mandatory for all internal crikiex staff accounts that have access to player data.
• Firewall and intrusion detection systems monitor platform infrastructure continuously for suspicious activity.
• Regular penetration testing is carried out by independent security assessors to identify and remediate potential vulnerabilities before they can be exploited.

7.2 Procedural Safeguards

• Access to personal data is restricted to staff members who require it to perform their specific role.
• All staff with access to personal data undergo mandatory data protection training.
• Third-party suppliers with access to personal data are subject to contractual data processing agreements with defined security obligations.
• A formal data breach response procedure is in place. In the event of a breach that poses a material risk to players, affected users will be notified promptly.

7.3 Player-Side Security

While crikiex takes every reasonable precaution to protect your data on the platform side, you also play a role in keeping your account secure. We recommend the following practices:

• Use a strong, unique password for your crikiex account that you do not use on any other platform.
• Enable two-factor authentication if offered on your account.
• Never share your password with anyone, including people who claim to be crikiex staff. crikiex will never ask for your password.
• Log out of your account when using a shared or public device.
• Contact support immediately at [email protected] if you suspect your account has been accessed without your knowledge.

8. Updates to This Policy

crikiex reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the services we provide. When we make a material change to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification.

We encourage all crikiex players to review this Privacy Policy periodically. Your continued use of the crikiex platform following the posting of a revised policy constitutes your acknowledgement of and agreement to the updated terms. If any update materially reduces your privacy rights, we will provide at least 14 days' notice before the change takes effect.

If you have any questions about this Privacy Policy, about how crikiex handles your personal data, or wish to exercise any of the rights described in Section 6, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week, and will direct your privacy enquiry to the appropriate team member.