criccex Privacy Policy
— How We Handle Your Personal Data

1 Data Controller

criccex acts as the data controller in respect of all personal data collected from players and visitors based in Bangladesh. As data controller, criccex determines the purposes and means by which personal data is processed. All data processing activities described in this Privacy Policy are carried out by criccex or by third-party processors operating under criccex's instruction and bound by appropriate data processing agreements.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the criccex data protection contact at the following address (plain text only, not a clickable link): support@criccex. We aim to respond to all privacy-related enquiries within 10 business days of receipt.

2 Information We Collect

criccex collects personal data from players and site visitors through several channels: during account registration, throughout the account lifecycle, when financial transactions are processed, when players interact with games or place bets, and through automated technologies such as cookies. The categories of data we collect are described below.

Account Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification to confirm you are 18 years of age or older).
• Residential address, including city and country (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other locations within Bangladesh).
• Email address (used for account communications, verification, and marketing where consent has been given).
• Mobile phone number (used for account security, two-factor authentication, and payment method linkage).
• Username and encrypted password (passwords are never stored in plain text).

Identity Verification (KYC) Data

• Copies of government-issued photo identification, such as your National ID card, passport, or driving licence.
• Proof of address documents where required, such as a recent utility bill or bank statement.
• Screenshots or confirmation records of payment accounts (bKash, Nagad, Rocket, or Upay) used to deposit funds, confirming that the mobile number matches the account registration.

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Payment method identifiers (such as the mobile number associated with a bKash or Nagad account, or a partial bank account number) — full payment credentials are never stored by criccex.
• Account balance history and bonus balance records.

Gameplay and Betting Data

• Game session logs, including games played, bets placed, outcomes, and timestamps.
• Sports betting records including markets wagered on, odds accepted, and settlement results.
• Bonus usage records, including which promotions were claimed and the wagering progress made against each.

Technical and Usage Data

• IP address and approximate geographic location derived from IP.
• Browser type, version, and operating system.
• Device type (desktop, mobile, tablet) and screen resolution.
• Pages visited, time spent on each page, and navigation paths through the platform.
• Referring URL (the page or search result from which you arrived at criccex).
• Session duration and login timestamps.

Communications Data

• Records of support tickets, live chat transcripts, and email correspondence between you and the criccex support team.
• Records of any complaints or disputes submitted, together with the outcome of those proceedings.
• Marketing preference settings, including any opt-in or opt-out choices made for promotional communications.

3 Purpose of Processing

criccex processes personal data only for legitimate, defined purposes. We do not process data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises the primary purposes for which each category of data is used.

4 Legal Basis for Processing

criccex processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is required to fulfil our obligations to you under the criccex Terms & Conditions, including account management, payment processing, and delivering gaming services.
• Legal Obligation: Processing carried out to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements, and fraud prevention obligations. This includes KYC processing and transaction monitoring.
• Legitimate Interests: Processing that is necessary for criccex's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes platform security monitoring, fraud detection, responsible gaming oversight, and analytics used to improve the platform.
• Consent: Where you have given explicit, informed consent to specific processing activities, such as receiving promotional emails or SMS messages about bonuses, tournaments, and seasonal offers. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests as a legal basis, we carry out a balancing assessment to ensure that our interests do not override your fundamental privacy rights. If you wish to obtain more information about any such assessment, you may contact us at support@criccex.

5 Data Sharing & Third Parties

criccex does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose. All third-party service providers who process personal data on our behalf are contractually required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions.

Payment Processing Partners

To process deposits and withdrawals, criccex shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The information shared is limited to what is strictly necessary to execute and verify the transaction. Payment providers operate under their own privacy policies and are independently regulated.

Game Studio Providers

Games on criccex are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Red Tiger. These studios may receive a session token and anonymised player identifier to deliver the game. They do not receive your full name, contact details, or financial data. Game results are transmitted back to criccex for settlement purposes.

Identity Verification Services

criccex may use third-party identity verification providers to assist with KYC processing. These providers receive identity document images and personal details solely for the purpose of verification. All such providers are bound by strict data processing agreements.

Analytics and Platform Performance

criccex uses privacy-respecting analytics tools to understand how the platform is used and to identify areas for improvement. Analytics data is aggregated and anonymised wherever possible. No personally identifiable information is shared with analytics providers beyond technical identifiers such as anonymised session IDs.

Legal and Regulatory Disclosures

criccex may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, by court order, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity. In such cases, we will disclose only the minimum data necessary and will notify the affected player where legally permitted to do so.

6 Cookies & Tracking

criccex uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data. The following categories of cookies are in use on criccex:

Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear stored cookies on exit, or prompt you before accepting any new cookies. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. For guidance on managing cookies in your specific browser, refer to the browser's built-in help documentation.

criccex does not use any persistent cross-site tracking technologies beyond those described in this section.

7 Data Retention

criccex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulation. The following retention guidelines apply:

• Active Account Data: Retained for the duration of the player's active account relationship with criccex, plus any applicable post-closure retention period.
• Closed Account Data: Following voluntary or enforced account closure, core account data (name, email, transaction records) is retained for a minimum of five years to comply with anti-money laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five years from the date of account closure or from the date the documents were last used for verification, in line with AML requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of five years from the date of the transaction for audit and regulatory purposes.
• Support Communications: Customer support correspondence is retained for a minimum of two years from the date of the most recent communication in a given thread.
• Marketing Consent Records: Records of your consent to receive marketing communications (or withdrawal of such consent) are retained for the duration of the account relationship and for a reasonable period thereafter as evidence of compliance.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymisation has been applied.

Where data is no longer required and no legal obligation requires its retention, criccex will securely delete or anonymise it. Secure deletion involves overwriting stored data in a manner that prevents recovery.

8 Your Data Rights

As a user of criccex, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the criccex support team at support@criccex with a clear description of your request. We will respond within 10 business days and may need to verify your identity before processing certain requests.

• Right of Access: You may request a copy of the personal data criccex holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data held by criccex is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal obligations — for example, we cannot delete transaction records that must be retained for AML compliance purposes, even if an account has been closed.
• Right to Restrict Processing: You may request that criccex restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to Object: You have the right to object to processing based on legitimate interests, and to object at any time to processing for direct marketing purposes. Where you object to direct marketing, we will cease all such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.

9 Data Security

criccex takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, the measures in place include the following:

• TLS/SSL Encryption: All data transmitted between your device and criccex is encrypted using industry-standard TLS (Transport Layer Security) protocols. The connection is secured before any personal or financial data is exchanged.
• Encrypted Password Storage: User passwords are never stored in plain text. They are hashed using a strong one-way hashing algorithm so that even in the unlikely event of a data breach, passwords cannot be read or reversed.
• Access Controls: Access to personal data within criccex's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and regularly audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. When enabled, a one-time verification code is required in addition to the password for each login, significantly reducing the risk of unauthorised account access.
• Secure Infrastructure: criccex's servers are hosted in data centres with physical security controls, network firewalls, intrusion detection systems, and regular security patch management.
• Data Breach Response: In the event of a personal data breach that poses a risk to player rights and freedoms, criccex has an incident response procedure in place. Affected players will be notified promptly where required and practicable, and remedial steps will be taken immediately.

Despite these safeguards, you also have a responsibility to protect your own account. You should use a strong, unique password for your criccex account, enable 2FA, and avoid logging in from shared or public devices. If you believe your account has been compromised, contact support@criccex immediately.

10 Policy Updates & Contact

criccex reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made — meaning changes that substantially affect your rights or the way your data is used — we will notify registered players by email or via an in-platform notice prior to the changes taking effect.

Non-material changes, such as clarifications of existing practices or corrections of typographical errors, may be made without advance notice. The effective date at the top of this document will always reflect when the policy was last updated. We encourage you to review this Privacy Policy periodically to stay informed.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way criccex handles your personal data, you may contact us using the following details (plain text only — not a clickable link):

We take all privacy-related correspondence seriously and will acknowledge receipt of your enquiry promptly. If you are not satisfied with our response, you may escalate your concern through the criccex formal complaints process described in the Terms & Conditions.