Privacy Policy for crickrex Players
Your privacy matters to us. This Privacy Policy explains what personal data crickrex collects, how we use it, who we share it with, and what rights you hold as a player based in Bangladesh. Please read it alongside our Terms & Conditions.
Our Commitments
How crickrex Protects Your Privacy
We are committed to handling your personal data with transparency and care. The six principles below guide how we treat every piece of information you share with us.
Section 1
Data We Collect
crickrex collects personal data from you through several channels: directly when you register an account or complete our KYC process, automatically when you use our platform, and occasionally from third-party sources such as payment processors. The categories of personal data we collect are described below.
Registration and Account Data
When you create a crickrex account, we collect your full legal name, date of birth, email address, and the mobile number associated with your preferred payment method (such as bKash, Nagad, or Rocket). This information is required to open and maintain your account and to process financial transactions in Bangladeshi Taka.
Identity Verification (KYC) Data
As part of our Know Your Customer obligations, we may collect copies of government-issued identification documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. We may also collect proof of payment method ownership, such as a screenshot of your bKash or Nagad account registration details. KYC documents are used solely for identity and age verification purposes.
Transaction and Financial Data
We record details of all deposits and withdrawals processed through your crickrex account, including transaction amounts in BDT, payment method used, transaction timestamps in Bangladesh Standard Time (BST, UTC+6), and transaction reference numbers. We do not store full payment card numbers on our servers. Card transactions are processed by PCI-DSS compliant payment partners.
Usage and Activity Data
When you use the crickrex platform — whether browsing the live casino, placing cricket bets on BPL or IPL fixtures, or spinning slots — we automatically collect certain technical and behavioural data. This includes your IP address, device type, operating system, browser type, session duration, pages visited, games played, bet amounts, and interaction patterns. This data is used to deliver the service, personalise your experience, detect fraud, and improve platform performance.
Communications Data
If you contact our support team via live chat, email, or WhatsApp, we retain a record of those communications, including the content of messages and any attachments shared. This data is used to resolve your query, train support staff, and maintain a record of the relationship between you and crickrex.
- Full name & date of birth
- Email address & mobile number
- NID / passport / driving licence
- Transaction history in BDT
- IP address & device data
- Session & gameplay activity
- Support communication records
Section 2
How We Use Your Data
crickrex processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data, and the corresponding legal basis for each, are set out in the table below.
| Purpose | Legal Basis | Details |
|---|---|---|
| Account creation and management | Contractual necessity | Processing your registration data to open and maintain your player account on crickrex. |
| Payment processing | Contractual necessity | Processing deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; processing withdrawal requests in BDT. |
| Identity and age verification (KYC) | Legal obligation | Verifying that you are who you say you are and that you meet the 18+ age requirement before withdrawal processing is enabled. |
| Fraud prevention and security | Legitimate interest | Monitoring account activity to detect and prevent fraud, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions. |
| Platform personalisation | Legitimate interest | Using gameplay and browsing data to tailor the games, promotions, and content shown to you on the crickrex platform. |
| Marketing communications | Consent | Sending you promotional offers, BPL cricket betting updates, Eid and Pohela Boishakh bonus notifications, and other marketing messages where you have opted in to receive them. |
| Responsible gaming monitoring | Legal obligation / Legitimate interest | Monitoring gameplay patterns for signs of problem gambling and triggering responsible gaming interventions where appropriate. |
| Customer support | Contractual necessity | Using your account and communication data to resolve support queries raised via live chat, email, or WhatsApp. |
Where we rely on your consent as the legal basis for processing — for example, for marketing communications — you may withdraw that consent at any time by updating your preferences in your account dashboard or by contacting support@crickrex. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Section 3
Data Sharing
crickrex does not sell your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for each stated purpose. All third parties with whom we share data are required to handle it securely and in accordance with applicable data protection standards.
Payment Processors
To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is required to complete the transaction. Each payment provider operates under its own terms of service and privacy policy.
Game Providers
The games available on crickrex are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain technical data — including your session identifier, bet history, and game outcome data — is transmitted to the relevant game provider's systems. Game providers use this data solely to deliver the game and to maintain the integrity of their certified RNG systems. They do not receive your personal identity or payment details from crickrex.
Identity Verification Partners
To fulfil our KYC obligations, crickrex may engage third-party identity verification service providers. These providers receive the document images and personal details you submit during the KYC process and use them solely for the purpose of verifying your identity and age. All such providers are contractually bound to maintain the confidentiality of your data.
Legal and Regulatory Disclosures
crickrex may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or legitimate legal process. We may also share data where we have a good-faith belief that disclosure is necessary to investigate fraud, money laundering, or other prohibited conduct affecting the platform or its players.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of the business assets of crickrex, player data may be transferred to the acquiring entity as part of that transaction. In such an event, registered players will be notified via email prior to the transfer taking effect, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.
Game providers (Pragmatic Play, Evolution, etc.)
KYC & identity verification services
Legal & regulatory authorities (where required by law)
- Third-party advertisers or ad networks
- Data brokers or list vendors
- Social media platforms for targeting
- Any party for their independent marketing use
Section 5
Data Security
crickrex takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to the following:
- SSL/TLS Encryption: All data transmitted between your browser or mobile device and the crickrex platform is encrypted using industry-standard SSL/TLS protocols. This applies to all login sessions, deposit and withdrawal flows, and account management actions.
- Secure Password Storage: Player passwords are stored in hashed form using a one-way cryptographic hashing algorithm. crickrex staff cannot retrieve your plaintext password. If you forget your password, a reset link will be issued to your registered email address.
- Access Controls: Access to personal data within crickrex's internal systems is restricted on a need-to-know basis. Only staff with a legitimate operational reason — such as customer support agents handling an active query — may access player account data, and all such access is logged.
- Fraud and Anomaly Detection: Automated monitoring systems continuously analyse account activity for unusual patterns that may indicate fraudulent access, credential stuffing, or other attacks. Suspicious activity triggers alerts and may result in temporary account suspension pending a security review.
- Third-Party Security Standards: Payment providers used by crickrex, including bKash, Nagad, and international card networks, operate under their own security certification frameworks (such as PCI-DSS for card payments). We verify that all payment partners maintain appropriate security standards before integrating with them.
Despite these measures, no internet-based platform can guarantee absolute security. You also have an important role in keeping your account secure: use a strong, unique password for your crickrex account, do not share your login credentials with anyone, and contact support@crickrex immediately if you believe your account has been compromised.
Section 6
Data Retention
crickrex retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or accounting obligations. The retention periods applicable to each category of data are described below.
Active Account Data
Personal data associated with an active crickrex account — including registration information, KYC documents, and transaction history — is retained for the full duration that your account remains open plus a minimum retention period following account closure as required by our legal obligations.
Transaction Records
All deposit and withdrawal transaction records, including amounts in BDT, payment method details, and timestamps in BST, are retained for a minimum of 5 years following the transaction date. This retention period is necessary to meet financial record-keeping requirements and to support any disputes, audits, or investigations that may arise.
KYC and Identity Documents
Copies of identity documents submitted for KYC verification are retained for a minimum of 5 years following account closure. In cases where a regulatory investigation or legal proceeding is ongoing at the time of account closure, documents may be retained until the matter is fully resolved.
Support Communications
Records of communications between you and the crickrex support team are retained for a minimum of 2 years from the date of the last communication in a given thread. This period allows us to reference prior support history when handling subsequent queries.
Marketing Data
If you have consented to marketing communications, your marketing preferences and associated contact data are retained until you withdraw consent or request deletion. Upon withdrawal of consent, your contact details are removed from active marketing lists within 10 business days.
Upon expiry of the applicable retention period, personal data is securely deleted from crickrex's systems or, where technical constraints make immediate deletion impractical, anonymised so that it can no longer be linked to you as an individual.
Transaction records: 5 years minimum
Support communications: 2 years from last contact
Marketing preferences: until consent withdrawn
Section 7
Your Privacy Rights
As a crickrex player, you hold a number of rights in respect of the personal data we hold about you. These rights are described below. To exercise any of them, please contact our support team at support@crickrex with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days.
Please note that some rights are subject to exemptions. For example, we may decline a deletion request where the data in question is required to meet a legal retention obligation or to defend against a legal claim. Where we are unable to fulfil a request in full, we will explain the reason in our response.
Section 8
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how crickrex handles your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.
How to Contact Us
The preferred method for submitting privacy-related requests is by email. Please use the subject line "Privacy Rights Request" or "Privacy Complaint" as appropriate, and include your registered account username or email address so that we can identify your account and respond efficiently.
Email:
Live Chat: Available 24/7 via the crickrex platform
WhatsApp: +880 1700 000000 (Display only — not a clickable link)
Response Time: We aim to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extended timeline.
Updates to This Privacy Policy
crickrex reviews this Privacy Policy periodically and reserves the right to update it at any time. When material changes are made, we will notify registered players via email to their registered address and display a notification on the platform at the time of their next login. The "Last Updated" date at the top of this page reflects the date on which the most recent revision was published. Your continued use of the crickrex platform following notification of changes constitutes acceptance of the revised Privacy Policy.
Children and Minors
crickrex is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you have reason to believe that a minor has registered an account or submitted personal data to crickrex, please contact us immediately at support@crickrex so that we can investigate and, where confirmed, delete the relevant account and associated data without delay. All players are required to confirm their age during registration, and identity verification is used to enforce the 18+ requirement. 18+
Ready to Play on crickrex?
Your data is protected. Your experience is secure. Explore cricket betting, live casino, and premium slots — all on Bangladesh's trusted gaming platform.