Privacy Policy — How crikxe Protects Your Data

When you register for and use a crikxe account, we collect a range of personal data that is necessary to deliver our services, fulfil our legal obligations, and protect the integrity of the platform. The categories of personal data we collect are described below.

1.1 Registration and Identity Data

At the point of account registration and during subsequent identity verification procedures, we collect: your full legal name, date of birth, gender, residential address (including city, postal code, and district — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), nationality, email address, mobile phone number, and a copy of an acceptable government-issued identity document (such as a National Identity Card or passport).

1.2 Financial Data

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or City Bank, we collect transaction records including the payment method identifier (e.g., mobile wallet number or bank account reference), transaction amount in Bangladeshi Taka (৳), transaction date and time, and transaction status. We do not store full debit/credit card numbers or mobile wallet PINs on our servers.

1.3 Account Activity Data

We record your betting and gaming activity on the crikxe platform, including wagers placed, games played, session durations, win/loss history, and bonus redemptions. This data is used for account management, responsible gaming monitoring, fraud prevention, and platform improvement.

1.4 Technical and Device Data

When you access crikxe, our servers and analytics systems automatically collect certain technical data, including: your IP address, device type and model, operating system version, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6 is the reference), referring URL, and pages viewed during each session.

1.5 Communications Data

If you contact our support team via email at [email protected] or through our on-platform messaging system, we retain records of that correspondence, including the content of your message, your contact details, and our response. These records are used to resolve disputes, improve customer service quality, and comply with record-keeping obligations.

crikxe processes your personal data only for the purposes described in this section and only where we have a lawful basis for doing so. The lawful bases we rely on are: (a) the performance of a contract with you; (b) compliance with a legal obligation; (c) our legitimate interests, provided they do not override your fundamental rights and freedoms; and (d) your explicit consent where required.

Where we rely on your consent to send marketing communications — such as promotional offers, bonus notifications, or VIP programme updates — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email we send you. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We do not use automated decision-making or profiling processes that produce legal or similarly significant effects concerning you, without providing you the opportunity to request human review of the outcome.

crikxe does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial gain. We may, however, share your data with the following categories of recipients in the circumstances described below:

• Payment processing partners: To facilitate your deposits and withdrawals, we share necessary transactional data with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners. These providers process your data solely to execute the requested transaction and are bound by their own data protection obligations and our contractual requirements.
• Game providers: Game studios supplying content to crikxe — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary to deliver and render their games. These providers do not receive your full name, national ID, or financial account details.
• Identity verification services: To fulfil our Know Your Customer (KYC) obligations, we may share identity document data with third-party verification service providers who are contractually bound to use that data only for verification purposes and to delete it upon completion.
• Analytics and security providers: We use reputable third-party services to monitor platform performance, detect fraud, and analyse usage patterns. These providers access only the minimum data required and operate under strict data processing agreements with crikxe.
• Legal and regulatory authorities: Where we are compelled by applicable law, court order, or legitimate request from a law enforcement or regulatory authority, we will disclose personal data to the extent required and permitted by law. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of crikxe's assets, your personal data may be transferred to the acquiring entity. We will notify affected users via the registered email address prior to any such transfer taking effect and will ensure the receiving entity is bound by privacy obligations no less protective than those in this policy.

The crikxe platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by the crikxe web server when you visit the site. Cookies do not contain executable code and cannot carry viruses or malware.

We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the crikxe platform to function. They manage your session authentication, maintain your logged-in state, and enable core platform features such as the bet slip, cashier, and account settings. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with the crikxe platform — for example, which pages are visited most frequently and whether users encounter error messages. This information helps us identify areas for improvement. We use first-party analytics tools for this purpose.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting (English), your last-used deposit method, and your responsible gaming limit configurations — so you do not have to reconfigure them on each visit.
• Security cookies: These cookies help detect and prevent fraudulent login attempts, cross-site request forgery, and other security threats. They are active only during authenticated sessions and are automatically deleted when you log out.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your crikxe account or using key platform features. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

crikxe does not use third-party advertising or retargeting cookies. We do not participate in cross-site behavioural advertising networks.

crikxe retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, or to comply with applicable legal and regulatory retention obligations. The following retention periods apply:

• Active account data: Identity, contact, and account activity data is retained for the duration of your active account relationship with crikxe, plus a minimum of five (5) years following permanent account closure to fulfil anti-money-laundering record-keeping obligations.
• Financial transaction records: Records of all deposits, withdrawals, and wagers are retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Copies of KYC documents (national ID, passport, address proof) are retained for five (5) years from the date of verification or from the date of account closure, whichever is later. These documents are held in encrypted, access-restricted storage.
• Customer support correspondence: Records of support interactions are retained for three (3) years from the date of the most recent exchange in a given support thread.
• Technical and device logs: Server access logs and device fingerprint data are retained for twelve (12) months for security monitoring purposes, after which they are purged or fully anonymised.
• Marketing preferences: Records of your consent to receive marketing communications, and any withdrawal of that consent, are retained for five (5) years from the date of the relevant consent event.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or re-identification. Anonymised, aggregated data (which cannot be linked back to any individual) may be retained indefinitely for statistical and product development purposes.

crikxe implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, we maintain the following controls:

• Transport Layer Security (TLS): All data transmitted between your device and crikxe servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed by a reputable certificate authority.
• Data encryption at rest: Sensitive personal data stored on our servers — including identity document scans and financial records — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to production data environments is restricted to a small number of authorised technical personnel. Multi-factor authentication is required for all administrative system access. Access logs are maintained and reviewed regularly.
• Penetration testing and vulnerability scanning: Our platform undergoes regular security assessments, including vulnerability scans and periodic penetration tests conducted by independent security specialists, to identify and remediate potential weaknesses.
• Incident response: crikxe maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players without undue delay and take immediate steps to contain and investigate the breach.
• Staff training: All crikxe personnel with access to player data receive mandatory training on data protection obligations, secure data handling practices, and the procedures for reporting suspected security incidents.

You also have a role in keeping your account secure. We strongly recommend using a unique, strong password for your crikxe account, enabling any available two-step verification feature, and never sharing your login credentials with any other person. If you suspect your account has been compromised, contact our support team immediately at [email protected].

As a data subject, you hold the following rights in relation to the personal data crikxe processes about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and sufficient information to verify your identity. We will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data crikxe holds about you, along with information about how that data is processed, the categories of recipients with whom it has been shared, and the retention periods that apply.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis exists — you may request the deletion of your personal data. Note that legal retention obligations (see Section 5) may prevent full erasure in some cases.
• Right to restriction of processing: You may request that we restrict the processing of your personal data while a rectification request is pending, or where you contest the lawfulness of our processing.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

If you have any questions, concerns, or complaints about the way crikxe handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our data protection team using the details below. All privacy-related correspondence is handled confidentially.

Email: [email protected]
Subject line: "Privacy Enquiry" or "Privacy Rights Request"
Response time: Within 30 calendar days of receiving a complete and verifiable request

We take all privacy complaints seriously. Upon receiving a complaint, we will: (a) acknowledge receipt within 5 business days; (b) investigate the matter thoroughly; (c) provide a written outcome and, where the complaint is upheld, take corrective action without delay.

If you are dissatisfied with our handling of your complaint after exhausting our internal process, you may seek independent recourse through appropriate data protection channels available in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all prior versions. crikxe reserves the right to update this policy at any time. Material changes will be communicated to registered players via email or on-platform notification. Continued use of the crikxe platform following notification of a material change constitutes acceptance of the revised Privacy Policy.