Privacy Policy — crickax

1 Data We Collect

When you register, interact with, or use the crickax platform, we collect various categories of personal data. This section describes each category and the circumstances under which that data is gathered. We collect only what is necessary for the purposes described in this Privacy Policy.

1.1 Registration Data

When you create a crickax account, we collect the following information that you provide directly:

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used to verify that you are aged 18 or above)
• Email address (used for account authentication and transactional communications)
• Mobile phone number (used for account verification and, where applicable, MFS payment matching)
• Residential address, including city, district, and postcode within Bangladesh
• Chosen username and encrypted password

1.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, crickax is required to verify your identity. During the KYC process, we may collect and retain:

• Scanned or photographed copies of your National Identity Card (NID), passport, or Bangladesh Road Transport Authority (BRTA) driving licence
• Proof of address documents such as utility bills, bank statements, or MFS account statements dated within the last 90 days
• A selfie or live photograph for facial verification purposes, where required by our KYC provider

These documents are processed and stored with strict access controls. Only authorised compliance personnel have access to KYC documents.

1.3 Financial Transaction Data

All deposit and withdrawal activity on your crickax account generates transaction records, which we retain for compliance and audit purposes. This includes:

• Deposit and withdrawal amounts in Bangladeshi Taka (BDT)
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Transaction reference numbers assigned by the MFS provider or bank
• The mobile number or bank account number associated with each transaction (masked in display, retained in records)

1.4 Behavioural and Usage Data

As you navigate and interact with crickax, we automatically collect certain technical and behavioural data:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation paths
• Games played, bet amounts, game outcomes, and bonus usage history
• Search queries entered within the platform's game search feature
• Responsible gaming tool usage, including any deposit limits or self-exclusion periods you have set

1.5 Communications Data

If you contact crickax's support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the resolution status of any support ticket. This data is used to improve service quality and to maintain a record of any commitments made by crickax during the interaction.

2 How We Use Your Data

crickax processes your personal data only for legitimate, clearly defined purposes. The table below summarises the primary uses of your data and the legal basis for each processing activity.

2.1 Marketing Communications

crickax may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal offers (such as BPL season promotions, Eid campaigns, or Pohela Boishakh specials), and new game launches — but only if you have opted in to receive such communications during registration or through your account settings. You may withdraw your consent at any time by updating your notification preferences in the account settings panel or by contacting support at support@crickax.

2.2 Automated Decision-Making

crickax uses automated systems for fraud detection, responsible gaming monitoring, and bonus abuse identification. These systems may result in automated actions such as flagging an account for review, temporarily suspending deposit ability, or triggering a KYC re-verification request. Where an automated decision has a significant effect on your account, you have the right to request a human review of that decision by contacting our support team.

3 Data Sharing & Disclosure

crickax does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors and MFS Providers

To process deposits and withdrawals, crickax must share relevant transaction data with the payment service providers you have chosen, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is strictly required to execute and verify each transaction. These providers operate under their own privacy policies and regulatory frameworks.

3.2 Game Content Providers

Games on the crickax platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Hacksaw Gaming, and Ezugi. To deliver and record game sessions, these providers receive a session token and may receive a pseudonymous player identifier. They do not receive your name, NID, or full financial data. Game providers operate certified RNG systems and are bound by contractual data processing terms with crickax.

3.3 KYC and Identity Verification Partners

crickax uses specialist third-party KYC technology providers to assist with identity document verification and facial matching. Your KYC documents and, where applicable, facial verification images are transmitted to these partners over encrypted connections. These partners are contractually obligated to process your data solely for identity verification purposes and to delete raw biometric data promptly after verification is complete.

3.4 Legal and Regulatory Disclosure

crickax may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in Bangladesh or internationally, where we are compelled to do so by law, court order, or regulatory instruction. In such cases, we will disclose only the minimum data required to comply with the specific legal obligation and, where permitted by law, will notify you of the disclosure.

3.5 Business Transfers

In the event that crickax undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to the acquiring entity assuming the obligations of this Privacy Policy with respect to your data. You would be notified of any such change by a prominent notice on the platform or by email.

4 Cookies & Tracking Technologies

crickax uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and protect against fraud. This section explains the types of cookies we use and your options for managing them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across sessions, store preferences, and collect usage data. Cookies may be stored for the duration of a browser session (session cookies) or for a longer defined period (persistent cookies).

4.2 Types of Cookies We Use

4.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete stored cookies on a per-site basis. Please note that disabling essential cookies will impair the core functionality of the crickax platform — you may not be able to log in or access your account balance if essential session cookies are blocked.

Instructions for managing cookies in common browsers used in Bangladesh can typically be found in the browser's Help or Settings menu under Privacy or Security.

4.4 No Cross-Site Tracking

crickax does not use third-party advertising cookies or tracking pixels to follow your activity across other websites after you leave the platform. All analytics cookies used by crickax are first-party or are operated by analytics providers under strict data processing agreements that prohibit them from using your data for any purpose other than providing aggregated analytics reports to crickax.

5 Data Retention

crickax retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

When the applicable retention period expires and there is no ongoing legal basis for continued retention, crickax will securely delete or anonymise your personal data. Secure deletion involves overwriting data storage in a manner that makes recovery technically infeasible.

6 Security Measures

crickax implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. While no platform can guarantee absolute security, we apply industry-standard practices appropriate to the sensitivity of the data we hold.

6.1 Technical Safeguards

• 128-bit SSL/TLS encryption on all data transmitted between your device and the crickax platform
• Encrypted storage for passwords (hashed using a modern one-way algorithm — passwords are never stored in plaintext)
• Encrypted storage for KYC documents and financial identifiers at rest
• Access controls limiting access to personal data to only those staff members whose job function requires it, enforced via role-based permissions
• Intrusion detection systems and automated alerts for abnormal access patterns on production systems
• Regular security assessments and vulnerability scanning of the platform infrastructure

6.2 Organisational Safeguards

• All staff with access to player personal data are required to complete data protection training before being granted access to production systems
• Third-party service providers with access to player data are vetted and required to sign data processing agreements committing them to equivalent security standards
• A documented incident response procedure is in place to contain, assess, and report data breaches within the timeframes required by applicable law

6.3 What You Can Do

The security of your account also depends on the steps you take to protect your own credentials. crickax recommends the following:

• Use a strong, unique password for your crickax account — one that you do not use for any other online service
• Never share your username, password, or one-time PIN (OTP) with any other person, including anyone claiming to be a crickax support agent
• Log out of your account when using a shared or public device
• Contact support@crickax immediately if you suspect that your account has been accessed by an unauthorised party

7 Your Rights

As a registered player on crickax, you have a number of rights with respect to your personal data. We are committed to respecting and facilitating these rights. To exercise any of the rights below, please contact our support team at support@crickax with your account username and a clear description of your request. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

7.1 Right of Access

You have the right to request a copy of the personal data that crickax holds about you. Upon a verified request, we will provide a summary of your account data, transaction history, and any other personal data we hold in a structured, commonly used format.

7.2 Right to Correction

If any personal data held in your crickax account is inaccurate or out of date, you have the right to request that it be corrected. Minor corrections (such as updating your registered mobile number) can be made directly through the account settings panel. Corrections to identity-level data (such as your legal name or date of birth) will require re-verification of your identity documents.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if crickax is no longer required to retain it for legal or contractual purposes. Please note that crickax is required by anti-money laundering regulations and financial record-keeping obligations to retain certain categories of data (particularly KYC documents and transaction records) for the retention periods specified in Section 5 above, even after account closure. Erasure requests for data subject to these mandatory retention obligations cannot be fulfilled until the applicable retention period has expired.

7.4 Right to Restrict Processing

In certain circumstances — such as where you have contested the accuracy of your data or where you have objected to processing based on legitimate interest — you may request that crickax restrict the processing of your personal data to storage only while the matter is under review.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving a marketing opt-out request, crickax will cease sending promotional communications to the identified contact channels within a reasonable period. Note that opting out of marketing does not affect transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts).

7.6 Right to Data Portability

Where we process your data on the basis of your consent or on a contractual basis, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider of your choosing. To request a data export, contact support@crickax.

8 Policy Changes

8.1 Updates to This Policy

crickax reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements applicable in Bangladesh. When material changes are made to this policy, we will notify registered players by email to their registered address and by a prominent notice displayed on the platform.

8.2 Effective Date

The version of this Privacy Policy displayed on this page is the current version and supersedes all previous versions. The effective date at the top of this page indicates when this version came into force. We recommend reviewing this policy periodically, as continued use of the crickax platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

8.3 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 7, or have a concern about how crickax has handled your personal data, please contact the crickax support team:

• Email: support@crickax
• Live Chat: Available 24/7 via the platform
• Response Time: All privacy-related enquiries are acknowledged within 3 BST business days and resolved within 30 calendar days