Your Privacy at crikxs

When you use the crikxs platform, we collect certain categories of personal data in order to provide our services, verify your identity, process financial transactions, and comply with our legal obligations. Below is a detailed account of the categories of data we collect and the circumstances under which each category is gathered.

1.1 Registration Data

When you create a crikxs account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (including city, such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This data is required to establish your account identity and to contact you about your account.

1.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to verify that all players are aged 18 or above, crikxs may collect copies of government-issued identity documents, including your National Identity Card (NID), passport, or driving licence. We may also collect a selfie or photograph to confirm that the identity document belongs to you.

1.3 Financial Data

When you make a deposit or request a withdrawal, we collect the details necessary to process that transaction. For mobile wallet transactions via bKash, Nagad, Rocket, or Upay, this includes your registered mobile wallet number. For bank transfers, this includes your bank account number, bank name (such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank), and branch details. For card payments via Visa or Mastercard, we collect your card number, expiry date, and billing address. crikxs does not store full card numbers after a transaction is complete — card data is handled by our PCI-DSS compliant payment processing partners.

1.4 Transaction and Gaming History

We maintain a record of all financial transactions conducted through your crikxs account, including deposit amounts (in Bangladeshi Taka ৳), withdrawal requests, bonus claims, and wagering activity. We also retain records of the games you have played, including game type, stake size, session duration, and outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

1.5 Technical and Usage Data

When you access crikxs, our servers automatically collect certain technical data about your device and browsing behaviour. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited on the crikxs platform, time spent on each page, and clickstream data. This information is used to optimise platform performance, diagnose technical issues, and improve the user experience for players across Bangladesh.

1.6 Communications Data

If you contact the crikxs support team — whether by email, live chat, or any other channel — we retain a record of that communication, including the content of messages, the date and time of contact, and any resolution actions taken. This data is used for quality assurance, dispute resolution, and training purposes.

1.7 Data Collected from Third Parties

In some circumstances, crikxs may receive personal data about you from third parties. This includes identity verification agencies used for KYC checks, fraud prevention services, payment processors, and publicly available sources such as government registers. Where we receive data about you from a third party, we handle it in accordance with this Privacy Policy.

crikxs uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis for doing so — either because it is necessary to perform our contract with you, because we have a legitimate interest in doing so, because we are required to by law, or because you have given us your consent.

Purpose	Data Used	Lawful Basis
Account creation and management	Registration data, identity verification data	Contract performance
Processing deposits and withdrawals	Financial data, transaction history	Contract performance
Age and identity verification (KYC)	Identity documents, selfie/photograph	Legal obligation
Fraud prevention and security	Technical data, transaction history, IP address	Legitimate interest
Responsible gaming monitoring	Gaming history, session data, deposit patterns	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / Legitimate interest
Platform analytics and improvement	Technical and usage data (anonymised where possible)	Legitimate interest
Marketing communications (opt-in only)	Email address, mobile number, preferences	Consent
Regulatory compliance and reporting	All categories as required	Legal obligation

2.1 Marketing Communications

crikxs may send you promotional communications about bonuses, new games, seasonal offers (such as those aligned with Eid, Pohela Boishakh, or BPL cricket season), and other crikxs features — but only if you have opted in to receive such communications at the time of registration or subsequently via your account settings. You may withdraw your consent to receive marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

2.2 Automated Decision-Making

In certain circumstances, crikxs uses automated processes to make decisions that may affect your account — for example, automated fraud detection systems that flag unusual transaction patterns, or responsible gaming tools that monitor deposit frequency and session duration. Where an automated decision significantly affects you, you have the right to request human review of that decision by contacting the crikxs support team.

crikxs does not sell, rent, or otherwise commercialise your personal data to third parties. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Service Providers

We share personal data with trusted third-party service providers who assist us in operating the crikxs platform. These partners include payment processors (including the operators of bKash, Nagad, Rocket, Upay, and bank payment gateways), identity verification and KYC service providers, customer support platform providers, cloud hosting and data storage providers, and analytics service providers. All such third parties are required to process your data solely in accordance with our instructions and to maintain appropriate security measures. We do not permit our service providers to use your data for their own independent purposes.

3.2 Game Providers

Games available on the crikxs platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as your session token and game outcome data) in order to deliver their games. This processing is governed by the respective data processing agreements between crikxs and each game provider.

3.3 Legal and Regulatory Disclosure

crikxs may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are required to do so by applicable law, by a court order, or to protect the rights, property, or safety of crikxs, our players, or the public. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement.

3.4 Business Transfers

In the event that crikxs undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. If such a transfer occurs, the acquiring entity will be required to handle your personal data in a manner consistent with this Privacy Policy. We will notify affected players of any such transfer in advance where reasonably practicable.

The crikxs platform uses cookies and similar tracking technologies (including local storage and session storage) to provide core platform functionality, remember your preferences, and analyse how the platform is used. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies We Use

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, enable secure account access, process transactions, prevent cross-site request forgery	No — essential for the platform to function
Functional / Preference	Remember your language preferences, display settings, and previously visited game categories	Yes — disabling may affect personalisation
Analytics	Collect anonymised data on which pages are visited, session duration, and navigation paths to help improve the crikxs platform	Yes
Fraud Prevention	Detect and prevent fraudulent activity by identifying suspicious device or behaviour patterns	No — required for platform security

4.2 Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to block all cookies, accept only certain types of cookies, or delete existing cookies. Note that blocking strictly necessary or fraud prevention cookies may prevent you from logging in to your crikxs account or using certain features of the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

4.3 Third-Party Analytics

crikxs may use third-party analytics tools that set their own cookies to collect anonymised usage data. Any data collected by such tools is subject to the data processing agreements between crikxs and those providers. These tools are configured to anonymise IP addresses and are prohibited from using data collected on the crikxs platform for the providers' own advertising or profiling purposes.

crikxs retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The retention periods set out below represent our standard data retention schedule.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal / regulatory obligation
Identity verification documents	Duration of account + 5 years after closure	KYC / anti-money laundering compliance
Transaction and financial records	7 years from transaction date	Financial record-keeping requirements
Gaming history and session data	Duration of account + 3 years after closure	Dispute resolution / responsible gaming
Customer support communications	3 years from last interaction	Quality assurance / dispute resolution
Technical / analytics data (anonymised)	Up to 26 months from collection	Platform analytics and improvement
Marketing consent records	Until consent is withdrawn + 2 years	Proof of consent basis for processing

5.1 Deletion and Anonymisation

When a retention period expires, crikxs will either securely delete the relevant personal data or anonymise it so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for analytical purposes. If you request deletion of your account and all associated data before the applicable retention period has expired, we will retain the minimum data required by law and delete everything else.

As a player on the crikxs platform, you hold a number of rights in relation to the personal data we hold about you. crikxs is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the crikxs support team at [email protected] with the subject line "Privacy Rights Request".

6.1 Right of Access

You have the right to request a copy of the personal data crikxs holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving your verified request. We will not charge a fee for processing a reasonable access request.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many of your account details directly through your crikxs account settings. For changes to identity-sensitive data (such as your legal name or date of birth), we may require you to provide documentary evidence of the correction.

6.3 Right to Erasure

You have the right to request that crikxs delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other lawful basis for continued processing. Please note that this right is subject to exceptions: we are required by law to retain certain categories of data (such as transaction records) for specified periods, and we cannot erase data that is needed to resolve an open dispute or legal claim.

6.4 Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while we investigate the accuracy of data you have disputed, or while you contest whether our legitimate interests override your rights in a particular case.

6.5 Right to Data Portability

Where crikxs processes your data on the basis of your consent or to perform our contract with you, and that processing is carried out by automated means, you have the right to receive a copy of the data in a structured, machine-readable format and to request that it be transferred directly to another data controller where technically feasible.

6.6 Right to Object to Marketing

You have the unconditional right to object to the processing of your personal data for direct marketing purposes at any time. If you exercise this right, crikxs will stop processing your data for marketing purposes immediately. You can opt out of marketing communications by contacting [email protected] or by using the unsubscribe link in any marketing email we send you.

crikxs implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls.

7.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the crikxs platform is encrypted using industry-standard Transport Layer Security (TLS). Look for the padlock symbol in your browser address bar to confirm your connection is secure.
• Data Encryption at Rest: Sensitive personal data stored in crikxs databases — including identity documents and payment information — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within crikxs systems is restricted on a strict need-to-know basis. Employees and contractors are granted only the minimum level of access required to perform their job functions, and all access is logged and auditable.
• Firewall and Intrusion Detection: The crikxs platform is protected by enterprise-grade firewall infrastructure and automated intrusion detection systems that monitor for suspicious access patterns in real time.
• Regular Security Audits: crikxs conducts periodic security assessments and vulnerability scans to identify and remediate potential weaknesses in our infrastructure before they can be exploited.

7.2 Your Role in Account Security

While crikxs takes extensive measures to secure your data on our side, account security is a shared responsibility. We strongly recommend that you use a strong, unique password for your crikxs account, enable two-factor authentication where available, never share your login credentials with another person, and log out of your account when using a shared device. If you suspect that your account has been compromised, contact the crikxs support team immediately at [email protected].

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, crikxs will take immediate steps to contain the breach, assess its severity, and notify affected players without undue delay. We will also report the breach to relevant authorities as required by applicable law. We maintain a documented data breach response procedure that is reviewed and tested regularly.

8.1 How to Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way crikxs handles your personal data, please contact our support team. All privacy-related enquiries will be handled with priority. Our contact details are as follows:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Platform: crikxs.net — Privacy enquiries may also be submitted via the in-platform live chat support tool.
• Response time: We aim to respond to all privacy enquiries within 5 business days, and to all formal rights requests within 30 days.

8.2 Updates to This Privacy Policy

crikxs may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material updates to this policy, we will publish the revised version on this page with an updated effective date. Where a change significantly affects how we process your personal data, we will notify you directly via your registered email address or via a notification in your crikxs account.

We encourage you to review this Privacy Policy periodically to stay informed about how crikxs protects your personal data. Continued use of the crikxs platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

8.3 Children's Privacy

The crikxs platform is strictly for individuals aged 18 years and above. crikxs does not knowingly collect personal data from anyone under the age of 18. If we discover that we have inadvertently collected personal data from a minor, we will delete that data immediately and permanently close the associated account. If you believe a minor has created a crikxs account, please notify us immediately at [email protected].