crickxs Privacy Policy — Your Data, Our Responsibility

1 Information We Collect

crickxs collects personal data through several channels: directly from you when you register or use our services, automatically through your use of the platform, and in limited circumstances from trusted third-party sources such as payment providers and identity verification agencies. We collect only what is genuinely necessary to operate a safe, compliant, and enjoyable gaming environment.

1.1 Information You Provide Directly

When you create a crickxs account, deposit funds, contact support, or participate in promotions, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and government-issued identification numbers (National ID, passport number)
• Contact data: Email address, mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere)
• Account credentials: Username and encrypted password hash (we never store your password in plain text)
• Financial data: Transaction amounts, deposit and withdrawal history, and payment method identifiers (e.g., the last four digits of a linked mobile wallet number)
• Verification documents: Copies of identity documents and proof-of-address documents submitted during KYC review
• Communications data: The content of messages you send to our support team via email or live chat

1.2 Information Collected Automatically

When you access the crickxs platform, our servers and analytics systems automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings
• Usage data: Pages visited, games played, bets placed, session duration, clickstream data, and features accessed
• Geolocation data: Approximate location derived from IP address (country and city level only — we do not use GPS-level location tracking)
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies (see Section 3 for full details)

1.3 Information from Third Parties

In limited circumstances, crickxs receives personal data about you from third parties, including:

• Payment providers: Transaction confirmation and reference data from bKash, Nagad, Rocket, Upay, and banking partners
• Identity verification services: Confirmation of identity and age verification status from KYC service providers
• Fraud prevention agencies: Risk scoring and flagging data to help us identify and prevent fraudulent account activity

2 How We Use Your Data

crickxs processes your personal data only where we have a lawful basis to do so. The primary lawful bases we rely on are: performance of a contract (delivering our gaming services to you), legal obligation (complying with our gaming licence requirements and anti-money laundering regulations), legitimate interests (improving platform security and preventing fraud), and, where required, your explicit consent.

The table below summarises the key purposes for which we use your data and the corresponding lawful basis:

We do not use automated decision-making or profiling in ways that produce significant legal effects on players, except where required by our anti-money laundering obligations. Where automated tools are used for risk scoring, a human review process is always available upon request.

3 Cookies & Tracking

crickxs uses cookies and similar tracking technologies to operate the platform, remember your preferences, measure site performance, and deliver relevant promotional content. A cookie is a small text file stored on your device when you visit a website. It does not give us access to your device or any information beyond what you have shared with us.

3.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in while you navigate the site. You cannot opt out of these without losing access to the platform.
• Performance and analytics cookies: Used to understand how players interact with crickxs — which pages are most visited, how long sessions last, and where errors occur. This data is aggregated and anonymised. We use this to continuously improve the platform experience.
• Functionality cookies: Used to remember your preferences, such as your preferred language settings and the last game category you browsed.
• Marketing and targeting cookies: Used to deliver promotional messages that are relevant to your interests based on your crickxs activity. You may opt out of marketing cookies at any time without affecting your access to games or account functionality.

3.2 Managing Your Cookie Preferences

You can manage or withdraw consent for non-essential cookies at any time by adjusting the cookie settings within your crickxs account preferences, or by configuring your browser to block or delete cookies. Note that disabling certain cookies (particularly functionality cookies) may affect your experience on the platform, such as requiring you to re-enter preferences on each visit.

4 Data Sharing & Third Parties

crickxs does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it with the same level of care we apply ourselves.

4.1 Service Providers

We work with carefully selected third-party service providers who assist us in operating the crickxs platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, and banking institutions), identity verification and KYC service providers, cloud infrastructure and hosting providers, customer support software vendors, and fraud detection and cybersecurity specialists. These providers access your data only to the extent necessary to perform their specific service and are bound by strict data processing agreements.

4.2 Game Content Providers

crickxs integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play these games, limited gameplay data (such as bet amounts, game outcomes, and session timing) may be shared with the relevant studio for game integrity and audit purposes. This data does not include your full name, contact details, or payment information.

4.3 Legal and Regulatory Disclosures

crickxs may disclose your personal data to governmental authorities, law enforcement agencies, or our gaming licence regulator where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will notify you of any such disclosure to the extent permitted by law.

4.4 Business Transfers

In the event that crickxs undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with a reasonable opportunity to close your account if you do not wish your data to be transferred.

5 Data Retention

crickxs retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations and legitimate business needs. The table below outlines our standard retention periods by data category:

When your data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual. We do not retain data "just in case" — every retention period has a documented legal or operational justification.

6 Your Privacy Rights

Regardless of where you are based, crickxs respects and upholds the following individual privacy rights. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format at no charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account profile data, many fields can be updated directly within your crickxs account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that certain data must be retained to fulfil our legal obligations under gaming and financial regulations — we will inform you of any data that cannot be deleted and the reason why.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances, for example while a dispute about its accuracy is pending.
• Right to data portability: You may request a copy of the personal data you have provided to us in a portable format, for transfer to another service provider.
• Right to object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7 Data Security Measures

crickxs implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes both technical controls and organisational measures, reviewed and updated on a regular basis.

7.1 Technical Safeguards

• Transport Layer Security (TLS 1.2+): All data in transit between your device and our servers is encrypted using current-standard TLS protocols
• Data encryption at rest: Sensitive personal data stored on crickxs infrastructure is encrypted using AES-256 encryption
• Password security: Account passwords are stored only as salted cryptographic hashes — our staff cannot read your password, and it is never transmitted in plain text
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for staff, and comprehensive audit logging
• Penetration testing: The crickxs platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited
• DDoS protection: Our infrastructure is protected by enterprise-grade distributed denial-of-service mitigation services to ensure platform availability and prevent data exposure through availability attacks

7.2 Organisational Measures

Beyond technical controls, crickxs maintains a formal information security policy, provides mandatory data protection training to all staff with access to personal data, and applies a privacy-by-design approach to all new features and platform changes. We also maintain an incident response plan to ensure any personal data breach is identified, contained, and reported to affected players and relevant authorities in a timely manner.

7.3 Your Role in Security

While crickxs takes every reasonable measure to protect your data on our side, account security is a shared responsibility. You should choose a strong, unique password for your crickxs account, never share your login credentials with anyone, and contact us immediately at [email protected] if you suspect your account has been accessed without your authorisation.

8 Changes to This Policy

crickxs reviews this Privacy Policy at least annually and whenever there are material changes to our data processing activities, applicable laws, or regulatory guidance. When we make significant changes to this Policy, we will notify you by email to your registered address and by a prominent notice on the crickxs platform at least 14 days before the changes take effect.

For minor, non-material updates (such as clarifications of existing practices, typographical corrections, or updated contact details), we will update the "Last Updated" date at the top of this Policy without separate notification. We encourage you to review this page periodically to stay informed about how we protect your personal data.

Your continued use of crickxs following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

8.1 Contact for Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or crickxs's data handling practices, please contact our dedicated privacy team using the details below. We take all privacy enquiries seriously and aim to provide a substantive response within 5 business days.