crikxs Privacy Policy

1.1 Information You Provide Directly

When you register an account, use our platform, or contact our support team, you provide us with personal data including but not limited to:

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (city/district within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Government-issued identity document number (National ID Card or passport)
• Financial account details for your registered payment method (bKash, Nagad, Rocket, Upay, or bank account)
• Any communications you send to us via email, live chat, or support ticket

1.2 Information Collected Automatically

When you access and use the crikxs platform, certain technical data is collected automatically through our systems and third-party analytics tools. This includes:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, pages visited, and features used
• Game activity logs, including bets placed, games played, and outcomes
• Deposit and withdrawal transaction records
• Referral source and campaign identifiers (where applicable)

1.3 Identity Verification Data

As part of our Know Your Customer (KYC) process, we may collect copies of identity documents such as your National Identity Card (NID), passport, or proof of address. This data is handled with heightened security protocols and is retained only for as long as required by applicable regulatory and anti-money laundering guidelines.

1.4 Cookies and Tracking Technologies

crikxs uses first-party cookies, session tokens, and local storage to maintain your login session, remember your language and display preferences, and monitor platform performance. We do not use cross-site advertising trackers. You may disable cookies via your browser settings, but doing so may affect the functionality of the platform, including your ability to remain logged in.

2.1 Marketing Communications

With your consent, crikxs may send you promotional communications about new games, seasonal offers (such as Eid, Pohela Boishakh, or BPL season promotions), VIP tier upgrades, and platform news. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or following the unsubscribe instructions included in any marketing message.

2.2 Automated Decision-Making

crikxs may use automated systems to assess account risk, detect fraud indicators, and enforce responsible gaming limits. Where an automated decision has a significant effect on your account (such as a temporary suspension), you have the right to request human review of that decision by contacting our support team.

3.1 Payment Processors

To facilitate deposits and withdrawals, crikxs shares relevant financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers operate under their own privacy policies and are independently responsible for data they hold in connection with your transactions.

3.2 Game Content Providers

Games delivered through third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Playtech — may receive limited session and player-ID data necessary to load and operate the game correctly. These providers do not receive your full personal profile and are contractually prohibited from using player data for independent purposes.

3.3 Legal and Regulatory Disclosure

crikxs may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in response to a lawful official request. We will notify you of any such disclosure where permitted by law.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of crikxs's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users by email or prominent platform notice prior to any such transfer taking effect and will ensure the acquiring party is bound by data protection obligations no less stringent than those in this Policy.

3.5 No Sale of Personal Data

crikxs does not sell, rent, lease, or otherwise commercially exploit your personal information to third parties for their own marketing, advertising, or commercial purposes. Any data shared with service partners is governed by strict confidentiality and data processing agreements that limit use to the specific purpose for which data was shared.

4.1 Retention Periods

crikxs retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. As a general guide:

• Account registration data: retained for the duration of your account plus 5 years following closure
• Financial transaction records: retained for a minimum of 5 years in accordance with anti-money laundering best practices
• KYC identity documents: retained for 5 years from the date of submission or account closure, whichever is later
• Customer support communications: retained for 3 years from the date of the interaction
• Marketing preference records: retained until you withdraw consent or request deletion

4.2 Deletion After Retention Period

Once personal data is no longer required for the purposes described in this Policy and no legal retention obligation applies, crikxs will securely delete or anonymise that data. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for analytical and business improvement purposes.

5.1 Technical Safeguards

crikxs implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include TLS/SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting internal staff access to personal data on a need-to-know basis, and regular security monitoring of platform infrastructure.

5.2 Your Responsibility

While crikxs takes all reasonable steps to protect your personal data, the security of information transmitted over the internet cannot be guaranteed absolutely. You are responsible for keeping your account password and mobile wallet PIN confidential. You should use a strong, unique password for your crikxs account and change it regularly. Do not share your credentials with anyone.

5.3 Data Breach Notification

In the unlikely event of a data security breach that poses a risk to your rights and freedoms, crikxs will notify affected users without undue delay and will take all appropriate remedial steps. Notifications will be sent to the email address associated with your crikxs account.

6.1 Right of Access

You may request a copy of all personal data crikxs holds about you. We will provide this in a commonly used electronic format within 10 business days of verifying your identity.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly. Please include the specific data you believe to be incorrect and what the correct information should be.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis for processing exists), or where you object to processing and there are no overriding legitimate grounds. Deletion requests will be processed within 30 days, subject to our legal retention obligations.

6.4 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out, contact [email protected] or follow the unsubscribe link in any marketing email. Once you opt out, we will cease sending marketing communications within 5 business days.

6.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

7.1 Strict 21+ Policy

The crikxs platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from an underage user, we will immediately suspend the associated account, delete the collected data, and take appropriate remedial action. Account holders are responsible for ensuring that minors do not access their accounts or the crikxs platform.

8.1 Policy Updates

crikxs may revise this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. When we make material changes, we will update the effective date at the top of this page and, where the changes significantly affect your rights, we will notify you by email at least 14 days before the changes take effect. Minor clarifications may be made without prior notice. Your continued use of the Service following any change constitutes acceptance of the updated Policy.

8.2 Contact for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way crikxs handles your personal data, please contact our support team. Our privacy contact email address is: [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.