Crikx Privacy Policy –
How We Protect Your Personal Data

1. Introduction

This Privacy Policy explains how Crikx ("Crikx", "we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors who use the Crikx platform at crikx.app. It applies to all services offered by Crikx, including account registration, deposits, withdrawals, gameplay, bonuses, and customer support.

We take your privacy seriously. The Crikx platform is built for Bangladesh players, and we understand that trust is the foundation of everything we do. When you share your personal information with us, you're trusting us to handle it responsibly. This policy is our commitment to doing exactly that.

By registering a Crikx account or using any part of the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not use the Crikx platform.

2. Personal Data We Collect

Crikx collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming experience. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a Crikx account, we collect:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address
• Username and password (password stored in encrypted form only)

2.2 Identity Verification Data

As part of our Know Your Customer (KYC) process, we may collect copies of identity documents such as your National ID card, passport, or driving licence. We may also collect a selfie or live photo for facial verification purposes. This data is used solely for identity verification and fraud prevention.

2.3 Payment Data

When you make a deposit or withdrawal, we collect transaction details including the payment method used (bKash, Nagad, or Rocket), the account number associated with that method, transaction amounts, and transaction reference numbers. We do not store full payment credentials — these are handled securely by our payment processing partners.

2.4 Gameplay Data

We record your activity on the Crikx platform, including games played, bet amounts, game outcomes, session duration, and bonus usage. This data is used to operate your account, detect fraud, and comply with responsible gaming obligations.

2.5 Technical Data

We automatically collect certain technical data when you access the Crikx platform, including your IP address, device type, operating system, browser type, and session timestamps. This data helps us maintain platform security and improve the user experience.

3. How We Collect Your Data

Crikx collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — when you access the Crikx platform, our systems automatically log technical data such as your IP address, device information, and session activity.
• From third parties — we may receive data from identity verification providers, payment processors, and fraud prevention services to supplement the information you provide directly.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

4.1 Account Operation

Your registration data is used to create and manage your Crikx account, authenticate your identity when you log in, and communicate with you about your account activity. Without this data, we cannot provide you with a Crikx account.

4.2 Payment Processing

Your payment data is used to process deposits and withdrawals via bKash, Nagad, and Rocket. We verify that payment accounts are registered in your name to prevent fraud and money laundering. Payment data is shared with our payment processing partners only to the extent necessary to complete transactions.

4.3 Identity Verification and Fraud Prevention

We use KYC data to verify your identity, confirm your age, and prevent fraud. Crikx is committed to maintaining a safe platform for all players, and identity verification is a key part of that commitment. We may use automated systems to screen accounts for suspicious activity.

4.4 Responsible Gaming

Your gameplay data is used to monitor for signs of problem gambling. If our systems detect patterns that suggest a player may be experiencing difficulties, we may reach out proactively or apply responsible gaming measures. This is a core part of how Crikx looks after its players.

4.5 Legal Compliance

We are required by law to retain certain records and to report specific activities to regulatory authorities. Your data may be used to fulfil these legal obligations. We will always inform you if we are required to share your data with authorities, unless we are legally prohibited from doing so.

4.6 Platform Improvement

Aggregated and anonymised gameplay and technical data is used to improve the Crikx platform, fix bugs, optimise performance, and develop new features. This data cannot be used to identify individual players.

4.7 Marketing Communications

With your consent, we may send you promotional emails or in-platform notifications about new games, bonuses, and offers on Crikx. You can opt out of marketing communications at any time by updating your account preferences or contacting support.

5. Legal Basis for Processing

Crikx processes your personal data on the following legal bases:

• Contract performance — processing necessary to operate your account and provide the services you have signed up for.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering regulations and age verification requirements.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, where you have given explicit consent. You may withdraw this consent at any time.

6. Data Sharing and Third Parties

Crikx does not sell your personal data to any third party. We share your data only in the following limited circumstances:

6.1 Payment Processors

We share necessary payment data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of data within their systems.

6.2 Identity Verification Providers

We use third-party KYC providers to verify the identity documents you submit. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.

6.3 Regulatory and Legal Authorities

We may be required to share your data with regulatory bodies, law enforcement agencies, or courts where required by applicable law. We will always seek to minimise the data shared in such circumstances.

6.4 Fraud Prevention Services

We may share limited data with fraud prevention and security services to protect the integrity of the Crikx platform and the safety of all players.

7. Data Retention

Crikx retains your personal data for as long as your account is active and for a period after account closure as required by applicable law. The standard retention periods are as follows:

• Account and registration data — retained for the duration of your account and for five years after account closure.
• Transaction and payment records — retained for seven years to comply with financial record-keeping requirements.
• KYC and identity documents — retained for five years after account closure or as required by applicable regulations.
• Gameplay records — retained for five years for responsible gaming monitoring and dispute resolution purposes.
• Technical and log data — retained for twelve months for security and fraud prevention purposes.

When data is no longer required, it is securely deleted or anonymised. You may request early deletion of your data in certain circumstances — see Section 10 for details of your rights.

8. Data Security

Crikx takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, or misuse:

• All data transmitted between your device and the Crikx platform is encrypted using TLS (Transport Layer Security).
• Personal data stored on our servers is encrypted at rest.
• Access to personal data is restricted to authorised Crikx staff on a need-to-know basis.
• All staff with access to personal data receive regular data protection training.
• We conduct regular security audits and penetration testing of our platform.
• Suspicious account activity is monitored in real time by our security systems.

9. Cookies and Tracking Technologies

Crikx uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. Here is a breakdown of the cookies we use:

9.1 Essential Cookies

These cookies are required for the Crikx platform to function. They keep you logged in during your session, maintain your account security, and enable core platform features. These cookies cannot be disabled without breaking the platform.

9.2 Preference Cookies

These cookies remember your settings and preferences, such as your preferred language and display options. They make your experience on Crikx more personalised and convenient.

9.3 Analytics Cookies

We use analytics cookies to understand how players navigate the Crikx platform — which pages are most visited, where players spend the most time, and where they encounter difficulties. This data is aggregated and anonymised and is used solely to improve the platform.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Crikx platform. Instructions for managing cookies are available in the help section of most major browsers.

10. Your Privacy Rights

You have the following rights in relation to the personal data Crikx holds about you:

• Right of access — you can request a copy of all personal data we hold about you at any time.
• Right to rectification — if any of your personal data is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure — in certain circumstances, you can ask us to delete your personal data. Note that we may be required to retain certain data for legal compliance purposes.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time.
• Right to object — you can object to processing based on legitimate interests in certain circumstances.

To exercise any of these rights, contact the Crikx support team at [email protected]. We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

The Crikx platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered a Crikx account or provided us with personal data, please contact us immediately at [email protected]. We will investigate and, if confirmed, close the account and delete all associated data promptly.

Crikx uses age verification as part of the registration and KYC process to prevent minors from accessing the platform. If we discover that an account holder is under 18, the account will be closed immediately and any balance forfeited in accordance with our Terms and Conditions.

12. Changes to This Privacy Policy

Crikx may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification at least seven days before the changes take effect.

The most current version of this Privacy Policy is always available at crikx.app/privacy-policy. The date at the top of this page indicates when the policy was last updated. Your continued use of the Crikx platform after any update constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or need to report a data concern, please contact the Crikx data team:

• Email: [email protected]
• Live Chat: Available 24/7 from within the Crikx platform
• Response Time: Privacy requests are handled within 30 days

For questions about responsible gaming, visit the Responsible Gaming page. For the full rules governing your use of Crikx, see the Terms and Conditions.