crickexs Privacy Policy
Your privacy is a core commitment at crickexs. This Privacy Policy explains exactly what personal data we collect when you use our Bangladesh betting platform, how that data is used, who it may be shared with, how long we retain it, and what rights you hold over your own information. We encourage every registered player to read this document in full.
256-Bit SSL Encryption
Every data transfer between your device and crickexs servers is protected by industry-standard 256-bit SSL encryption. Your credentials and personal data are never transmitted in plain text.
No Data Sold
crickexs does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate and improve your account experience on our platform.
Your Rights Protected
You retain the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team. We respond to data requests within 30 days.
1 Information We Collect
When you register, verify, and use your crickexs account, we collect a range of personal information necessary to deliver the platform's services securely and in compliance with responsible gaming obligations. We collect only what is genuinely required for the purposes set out in this Policy, and we do not collect sensitive personal data beyond what is necessary for identity verification and legal compliance.
1.1 Information You Provide Directly
The following categories of data are collected when you register or interact with crickexs:
| Data Category | Specific Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number, selfie photo | Registration and KYC verification |
| Contact Data | Mobile phone number, email address | Account registration |
| Payment Data | bKash / Nagad / Rocket account number, bank account details (name and number only — no PINs or passwords) | Deposit and withdrawal transactions |
| Account Credentials | Username, hashed password | Registration; stored in hashed form only |
| Support Data | Contents of live chat conversations, email correspondence, reported issues | Customer support interactions |
| Preference Data | Responsible gaming settings, deposit limits, self-exclusion preferences | Account settings, responsible gaming tool usage |
1.2 Information Collected Automatically
When you access the crickexs website or mobile interface, our systems automatically collect certain technical data. This data is primarily used for security monitoring , fraud prevention, and platform performance optimisation:
- Device Information: Device type, operating system, browser type and version, screen resolution.
- Network Information: IP address, approximate geographic location derived from IP, internet service provider (ISP).
- Session Data: Pages visited, time spent on each page, navigation path, referral source, timestamps of login and logout events.
- Betting and Gaming Activity: Bet history, game session logs, deposit and withdrawal transaction records, bonus redemption history.
- Cookie Data: Identifiers stored via cookies and similar tracking technologies — see Section 4 for full details.
1.3 Information from Third Parties
In limited circumstances, crickexs may receive personal data about you from third parties, including:
- Identity Verification Providers: Third-party KYC services used to validate the authenticity of identity documents submitted during account verification.
- Fraud Prevention Services: Industry shared databases used to screen for known fraudulent actors, money laundering patterns, or self-excluded players.
- Game Providers: Aggregated game session data returned by certified providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Spribe for settlement and dispute resolution purposes.
2 How We Use Your Data
crickexs uses the personal data we collect for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are as follows:
2.1 Account Operations
- Creating and maintaining your crickexs player account.
- Authenticating your identity at each login to prevent unauthorised account access.
- Processing deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank).
- Communicating account-related information such as transaction confirmations, security alerts, and KYC verification status updates.
2.2 Legal and Regulatory Compliance
- Verifying your age and identity in accordance with responsible gaming and anti-underage-gambling obligations — players must be 18 years of age or older.
- Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations by monitoring transaction patterns and maintaining transaction records.
- Responding to lawful requests from courts, law enforcement agencies, financial regulators, or other competent authorities.
- Maintaining records of self-exclusion and responsible gaming limit settings in accordance with player protection commitments.
2.3 Platform Security and Fraud Prevention
- Detecting and preventing account takeover attempts, fraudulent transactions, duplicate account creation, and bonus abuse.
- Monitoring login patterns and flagging anomalous access events that may indicate compromise of your account credentials.
- Investigating suspected match-fixing or prohibited betting activity in cooperation with sports integrity bodies.
2.4 Service Improvement and Personalisation
We analyse aggregated and anonymised usage data to understand how players interact with crickexs, identify areas for improvement, and optimise the platform's performance and user experience. Where permissible and where you have not opted out, we may use your game preference and activity data to surface relevant promotions or game recommendations within your account dashboard. We do not use this data to target you with advertising on third-party websites.
3 Data Sharing and Third Parties
crickexs does not sell your personal data. We share personal data with third parties only where strictly necessary and only under controlled conditions that require those third parties to handle your data with the same standard of care that we apply. The categories of third parties with whom we may share your data are set out below.
3.1 Service Providers and Data Processors
We engage trusted third-party service providers who process personal data on our behalf and under our instruction only:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank receive the minimum transaction data required to execute your deposit or withdrawal instruction.
- KYC and Identity Verification Providers: Third-party identity verification services that validate NID documents and perform liveness checks during the account verification process.
- Game Content Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to deliver game content and settle game outcomes. These providers do not receive your full name, contact details, or payment information.
- Cloud Infrastructure and Hosting Providers: Secure cloud infrastructure providers who host the crickexs platform and its databases under strict data processing agreements.
- Customer Support Platforms: The live chat and support ticketing systems through which you communicate with our support team may process message content to deliver the service.
3.2 Legal Disclosures
crickexs will disclose personal data to third parties without your prior consent where we are legally required or permitted to do so, including:
- Complying with a court order, subpoena, or binding legal process issued by a competent authority.
- Reporting suspicious transaction activity to financial intelligence units in accordance with AML obligations.
- Sharing data with sports integrity organisations (such as the ICC Integrity Unit or Bangladesh Cricket Board integrity officers) in connection with a suspected match-fixing investigation.
- Protecting the rights, property, or safety of crickexs, its players, or the public where disclosure is necessary and proportionate.
3.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of crickexs, player data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, crickexs will publish a notice on this Privacy Policy page and notify registered players via their registered contact details at least 14 days before the transfer takes effect, giving players the opportunity to close their account if they do not consent to the transfer.
4 Cookies and Tracking Technologies
crickexs uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. Cookies are small text files stored on your device by your browser. They allow the platform to recognise your session, remember your preferences, and analyse how you interact with the site.
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, login state, security tokens, CSRF protection. The platform cannot function without these cookies. | Session / up to 24 hours |
| Functional | Remembering your language preference (English), saved odds display format, and responsible gaming limit settings. | Up to 12 months |
| Analytics | Aggregated, anonymised data on page views, navigation paths, and feature usage — used to improve the platform experience. | Up to 24 months |
| Fraud Prevention | Device fingerprinting tokens used to detect duplicate accounts and suspicious login patterns. | Up to 6 months |
4.2 Managing Cookies
You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your crickexs account and accessing platform features. Disabling functional or analytics cookies will not affect your ability to bet or play games, but may reduce the personalisation of your experience.
Instructions for managing cookies in commonly used browsers can be found in the browser's own help documentation. crickexs does not currently respond to browser-level Do Not Track (DNT) signals, as no industry-wide standard for DNT compliance has been established.
5 Data Retention
crickexs retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The retention periods we apply are set out below.
- Active Account Data: Retained for the full duration of your account's active status. This includes your identity data, contact data, and account credentials.
- Transaction Records: Deposit and withdrawal records, including payment method references and transaction amounts, are retained for a minimum of 5 years from the date of the transaction in accordance with AML record-keeping obligations.
- KYC Documents: Identity verification documents (NID copies, selfie photos) are retained for a minimum of 5 years following account closure or the last KYC verification event, whichever is later.
- Betting and Gaming Records: Individual bet and game session records are retained for a minimum of 3 years for dispute resolution, integrity monitoring, and audit purposes.
- Support Correspondence: Live chat logs and email correspondence are retained for 2 years from the date of the interaction.
- Closed or Dormant Account Data: Following voluntary account closure or permanent suspension, core identity and transaction records are retained for the regulatory minimum period and then securely deleted or anonymised.
- Self-Exclusion Records: Records of self-exclusion requests are retained for a minimum of 7 years to prevent a player from circumventing a self-exclusion by reopening an account under the same identity.
6 Security Measures
Protecting your personal data is a technical and organisational priority at crickexs. We implement a layered security architecture to guard against unauthorised access, accidental loss, alteration, or disclosure of the data we hold.
6.1 Technical Safeguards
- 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and crickexs servers is encrypted in transit using current TLS standards.
- Password Hashing: Account passwords are never stored in plain text. We apply a strong one-way cryptographic hash function with salting so that even internal staff cannot read your password.
- Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Where available, 2FA provides a second layer of protection against credential compromise.
- Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to role-based access control policies.
- Intrusion Detection: Our infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and other indicators of attack.
- Data Segregation: Personal identity data is stored in logically segregated systems separate from betting and gaming logs, reducing the blast radius of any potential breach.
6.2 Organisational Safeguards
- All staff and contractors with access to personal data are bound by confidentiality obligations and receive data protection training.
- Third-party suppliers who process personal data on our behalf are assessed for security compliance before engagement and are contractually obligated to maintain appropriate technical and organisational measures.
- crickexs maintains an incident response plan. In the event of a confirmed personal data breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay and no later than 72 hours after the breach is confirmed internally.
7 Your Privacy Rights
As a crickexs account holder or platform visitor, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat inside your account or by writing to support@crickexs. We will respond to all verified requests within 30 calendar days.
| Right | What It Means for You |
|---|---|
| Right of Access | You may request a copy of the personal data crickexs holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. |
| Right to Rectification | If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor contact detail updates (phone number, email) can be made directly within your account settings. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires continued retention. Note that AML and KYC retention obligations may prevent full immediate erasure of certain records. |
| Right to Restriction | You may request that crickexs restricts the processing of your personal data in certain circumstances — for example, while a rectification request is under review. |
| Right to Data Portability | You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider. |
| Right to Object | You may object to the processing of your personal data for direct marketing or profiling purposes at any time. On receipt of a valid objection, crickexs will cease that specific processing immediately. |
Please note that certain rights are subject to legal limitations. For example, where crickexs is required by AML law to retain transaction records for five years, a right-to-erasure request cannot override that legal obligation for those specific records. We will always explain clearly if a legal limitation applies to your request.
8 Changes to This Policy
crickexs reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable laws, or regulatory guidance. The updated Policy will be published on this page with a revised effective date.
Where a change is material — meaning it significantly alters how we collect or use your personal data, or reduces your privacy rights — we will notify registered players via the email address or mobile number on file at least 14 days before the change takes effect. For non-material clarifications or editorial corrections, the updated Policy will take effect on the date of publication without advance notice.
Your continued use of the crickexs platform following the effective date of any amended Privacy Policy constitutes your acceptance of those changes. If you do not agree with a material change to this Policy, you may close your account before the change takes effect by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our data support team. Email: support@crickexs (plain text — not a clickable link). Live chat is available 24 hours a day, 7 days a week, from within your logged-in crickexs account dashboard.
Your Data, Your Control
You can access, update, or request deletion of your personal data at any time. Contact our support team to exercise your privacy rights — we respond within 30 days.
Related Documents
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy for a full picture of how we operate.
Have Questions?
Our FAQ page covers common questions about account security, data handling, deposits via bKash and Nagad, and more.
Safe and Responsible
crickexs is committed to a secure, fair, and responsible gaming environment for all Bangladeshi players. 18+ only. Play within your limits.
Explore crickexs With Confidence
Now that you understand how crickexs protects your privacy, explore our full range of cricket betting markets, live casino tables, and slot games — all in BDT.