Privacy Policy — How crickux Protects Your Data

Information We Collect

crickux collects personal information from you in several ways, depending on how you interact with the platform. The categories of data we collect are set out below. We collect only the information that is genuinely necessary to deliver our services safely and in compliance with applicable obligations.

Registration and account data: When you create a crickux account, we collect your full legal name, date of birth, residential address in Bangladesh (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and a password of your choosing. This information is required to open and maintain your account.

Identity verification (KYC) data: To comply with our age verification and anti-money laundering obligations, we collect copies of government-issued identity documents. For Bangladesh players, acceptable documents include a National Identity Card (NID), passport, or driver's licence. We may also collect a utility bill or bank statement as proof of address.

Financial data: When you make a deposit or request a withdrawal, we collect payment method identifiers. For mobile money services — bKash, Nagad, Rocket, or Upay — this means your registered mobile number. For bank transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, we collect your account name and account number. We do not store full card numbers or mobile banking PINs; these are handled directly by the payment provider.

Behavioural and usage data: We automatically collect data about how you use the platform, including pages visited, games played, bets placed, session duration, device type, operating system, browser type, and IP address. This data helps us personalise your experience, detect fraud, and improve the platform. It is not linked to your name in any external reporting.

Communications data: When you contact our support team via email at support@crickux, we retain a record of that correspondence, including the content of messages and any attachments you provide. This allows us to track the resolution of your query and improve our service quality.

Voluntary survey and feedback data: If you choose to participate in a player satisfaction survey or submit feedback through any on-platform form, we collect the responses you provide. Participation in surveys is entirely voluntary and responses are used solely to improve platform services.

How We Use Your Data

crickux uses the personal information it collects for clearly defined purposes. We do not use your data for any purpose beyond what is described in this policy without first obtaining your consent or being required to do so by law.

Service delivery: The primary use of your personal data is to operate your crickux account, process your bets, execute deposits and withdrawals via your chosen Bangladesh payment method, and provide you with access to the full range of games and markets on the platform.

Identity and age verification: We use the personal and documentary information you provide during KYC to confirm that you are who you say you are and that you meet the minimum age requirement of 18 years. This is not optional — unverified accounts cannot process withdrawals, and accounts where verification raises concerns may be suspended.

Fraud prevention and security: Behavioural data, device fingerprints, and IP address information are used by our security systems to detect suspicious account activity, identify potential bonus abuse, flag unusual transaction patterns, and prevent unauthorised account access. These processes operate continuously in the background as a safeguard for all players.

Anti-money laundering (AML) compliance: We are obligated to monitor transactions for patterns consistent with money laundering. Where our compliance team identifies a concern, data may be shared with relevant law enforcement or financial intelligence authorities as required under applicable law. This obligation exists independently of your consent.

Responsible gaming: We use your account activity data — including session length, deposit frequency, and betting patterns — to identify signs of problem gambling behaviour. If our responsible gaming tools flag your account, our support team may reach out proactively to offer assistance, refer you to the self-exclusion tool, or temporarily limit your account activity.

Marketing communications: If you have opted in to receive promotional emails or notifications, we use your email address and account history to personalise bonus offers, tournament invitations, and relevant updates. You may withdraw your marketing consent at any time via your Account Settings page. Opting out of marketing does not affect the delivery of essential account communications such as deposit confirmations and security alerts.

Platform improvement: Aggregated and anonymised usage data helps us understand how players interact with the platform — which games are most popular, where navigation friction occurs, and how the mobile experience performs on common devices used in Bangladesh. This analysis informs product improvements but does not identify individual players.

Data Sharing and Third Parties

crickux does not sell your personal data to any third party. We share your information only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment service providers: To process your deposits and withdrawals, we share the transaction details and relevant account identifiers with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, or your nominated Bangladeshi bank. These providers operate under their own privacy policies and are independently regulated financial service entities.

Identity verification services: Your KYC documents may be shared with a third-party identity verification platform that crickux uses to authenticate documents and perform automated age checks. These service providers are contractually bound to process your data only for verification purposes and are prohibited from using it for any other purpose.

Game content providers: Certain technical data — including your session token and game round identifiers — is shared with game studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate gameplay and resolve any disputes about game outcomes. These providers do not receive your name, payment details, or contact information.

Analytics and infrastructure providers: Anonymised or pseudonymised usage data may be processed by cloud infrastructure and analytics partners to ensure platform performance and reliability. These providers act as data processors under our instruction and are bound by strict data handling agreements.

Law enforcement and regulatory authorities: Where crickux receives a valid legal request — such as a court order, regulatory direction, or formal law enforcement inquiry — we will disclose the minimum personal data necessary to comply with that request. Where legally permissible, we will notify the affected account holder.

Business transfers: In the event of a merger, acquisition, or transfer of assets involving crickux, your personal data may form part of the assets transferred to the acquiring entity. Any such transfer will be subject to equivalent privacy protections as described in this policy, and affected players will be notified in advance.

Cookies and Tracking Technologies

crickux uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to analyse how the site is used at an aggregate level. This section explains what each category of cookie does and how you can control your cookie experience.

Strictly necessary cookies: These cookies are essential for the platform to operate. They maintain your login session so you are not signed out every time you navigate to a new page, store your language and currency preferences, and ensure that security tokens are properly validated. Without these cookies, crickux cannot function. They cannot be disabled.

Functional cookies: Functional cookies remember choices you make — such as your preferred deposit method or favourite game lobby view — so you do not have to reset them on each visit. These cookies improve your experience but are not strictly required for core platform functionality. You can disable them in your Account Settings, though some convenience features may be affected.

Analytics cookies: We use pseudonymised analytics cookies to understand aggregate usage patterns — for example, which game categories are most visited by players from Dhaka versus Chittagong, or how the mobile navigation performs relative to the desktop view. These cookies do not identify you personally and are processed only at an anonymised, aggregate level.

Third-party cookies: Game content delivered by providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may set their own session cookies within the game frame to manage game state and round integrity. These cookies are scoped to the game provider's domain and are governed by the respective provider's cookie policy. crickux does not use third-party advertising or retargeting cookies.

Managing your cookie preferences: Most modern browsers — including those commonly used in Bangladesh on Android and iOS devices — allow you to control cookie behaviour through the browser's Privacy or Settings menu. You can choose to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into crickux.

Data Security and Retention

crickux takes the security of your personal data seriously. We apply a combination of technical, organisational, and procedural safeguards designed to protect your information against unauthorised access, accidental loss, alteration, and disclosure.

Technical measures: All data in transit between your device and our servers is protected by TLS 1.2 or higher. Sensitive data at rest — including KYC documents and financial records — is stored in encrypted form using AES-256 encryption. Access to production data systems is restricted to authorised personnel using multi-factor authentication and role-based access controls.

Organisational measures: Access to personal data is granted on a strict need-to-know basis. All crickux staff and contractors with access to player data are subject to confidentiality obligations. We conduct periodic internal security reviews and take corrective action wherever weaknesses are identified.

Data breach response: In the event of a personal data breach that poses a risk to affected players, crickux will notify affected account holders by email as soon as practicable after the breach is discovered and contained. We will describe the nature of the breach, the categories of data affected, and the steps we have taken or are taking to mitigate harm.

Data retention periods: We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table on the right provides indicative retention periods for the main categories of data we hold. After the applicable retention period, data is securely deleted or irreversibly anonymised.

Account closure and data: When you close your crickux account, certain categories of data — particularly financial transaction records and KYC documents — are retained for the mandatory period required under anti-money laundering regulations, after which they are permanently deleted. Marketing preferences and session logs are deleted immediately upon account closure.

Your Privacy Rights

As a crickux player, you hold a number of rights in relation to your personal data. crickux is committed to honouring these rights promptly and without imposing unnecessary barriers. To exercise any of the rights described below, contact our support team at support@crickux (plain text — not a clickable link) with the subject line "Privacy Rights Request" and the details of your request.

• Right of access: You may request a copy of the personal data crickux holds about you. We will provide this in a structured, commonly used, machine-readable format within a reasonable timeframe following identity verification.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For certain data types — such as your registered name — we may require supporting documentation before making the change.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been unlawfully processed. This right is subject to overriding retention obligations, particularly those arising from anti-money laundering law.
• Right to restriction of processing: You may ask us to restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is disputed or while an erasure request is being assessed.
• Right to data portability: Where data is processed on the basis of your consent or to perform a contract, you may request that we provide your personal data in a portable format so it can be transferred to another service provider.
• Right to object to marketing: You may object to the use of your data for direct marketing at any time. This can be done via Account Settings or by contacting support. We will stop using your data for marketing purposes immediately upon receipt of a valid objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We aim to respond to all privacy rights requests within 30 calendar days. If a request is particularly complex or if a large volume of requests is received simultaneously, we may extend this period by a further 30 days and will notify you accordingly.

Children and Minors

crickux is strictly an adults-only platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. All registration flows include an age declaration, and every account is subject to KYC verification designed to confirm the account holder meets the minimum age requirement.

If crickux becomes aware — through any means, including a report from a parent or guardian, or through the KYC review process — that an account is held by a person under 18, we will immediately suspend that account, void any transactions made during the underage period, and permanently delete all personal data associated with the account as quickly as our legal obligations permit.

Parents and guardians who believe a minor has registered on crickux are urged to contact us immediately at support@crickux (plain text — not a clickable link). We take reports of underage access seriously and will act on them without delay. We also recommend that parents and guardians use parental control software to restrict access to gambling websites on shared or family devices.

Policy Updates and Contact

crickux reviews this Privacy Policy periodically and updates it whenever there is a material change to how we collect, use, or share personal data — or when changes in applicable law or our platform services require it. The effective date at the top of this document will always reflect the most recent revision.

When we make a significant change to this policy — for example, introducing a new category of data collection, changing the purposes for which we use your data, or adding a new category of third-party recipient — we will notify registered account holders by email to the address on file. We may also display a prominent notice on the crickux platform for a reasonable period following the update.

Minor changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without individual notification. In all cases, the current version of this Privacy Policy will be accessible on this page at all times.

Continued use of the platform after a policy update constitutes acceptance of the revised terms. If you do not agree with any changes made to this Privacy Policy, you should stop using crickux and may request account closure by contacting our support team.

Questions and complaints: If you have any question about this Privacy Policy, wish to exercise one of your privacy rights, or believe that crickux has handled your personal data in a manner inconsistent with this policy, please reach out to us. Our support team is available 24 hours a day, 7 days a week, and will escalate privacy-related queries to the appropriate internal team. Contact details are provided in the box to the right. We take all privacy complaints seriously and aim to resolve them fairly and promptly.

This Privacy Policy was last reviewed and approved on 1 January 2026 and applies to all personal data processed by crickux in connection with its online casino and sports betting services serving the Bangladesh market.