Your Privacy Matters
to crickx app

crickx app collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from third-party verification partners. The categories of data we collect are described below.

Data You Provide Directly

When you complete the crickx app Login registration process or interact with our services, you provide us with:

• Identity data: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identity document.
• Contact data: Email address, Bangladesh mobile number, and residential address including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Financial data: Your preferred BDT payment method (bKash, Nagad, Rocket, Upay, or bank account details for Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts, and deposit and withdrawal history.
• Verification documents: Copies of National Identity Card (NID), passport, driver's licence, or other documents submitted as part of the KYC process.
• Communications data: Records of your correspondence with the crickx app support team, including live chat transcripts, email exchanges, and support ticket histories.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, time-out preferences, and any information you voluntarily provide when seeking support for gambling-related concerns.

Data Collected Automatically

When you access the crickx app platform, certain technical data is collected automatically by our systems:

• Device and browser data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each section, click paths, search queries within the platform, bet history, game session data, and feature interactions.
• Location data: Approximate geographic location derived from your IP address. crickx app does not collect precise GPS-level location data.
• Session data: Login timestamps, session duration, logout events, and security event logs (such as failed login attempts or password reset requests).

crickx app processes your personal data only for specific, legitimate purposes. We do not use your data in ways that go beyond what is described here. The primary purposes for which we process Member data are as follows:

Where we rely on consent as our legal basis — for example, when sending you promotional emails about BPL cricket betting offers or crickx app Casino bonuses — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To opt out of marketing communications, adjust your notification preferences in your account settings after crickx app Login or contact our support team.

crickx app uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to detect fraudulent activity, and to understand how Members interact with different areas of the site. The types of cookies we use are described below.

• Strictly necessary cookies: These cookies are essential for the crickx app platform to operate. They maintain your authenticated session after crickx app Login, remember your account preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without disrupting core platform functionality.
• Functional cookies: These remember your language and display preferences, your last-used payment method (e.g., bKash or Nagad), and other personalisation settings. Disabling them will not prevent you from using the platform but may reduce convenience.
• Analytical cookies: We use anonymised, aggregated analytics to understand which pages and features are used most frequently, which sports markets attract the most interest (such as BPL or T20 World Cup cricket), and where Members encounter difficulty. This data informs product development decisions and is never used to identify individual Members.
• Security cookies: These record device fingerprint data and session identifiers used by our fraud detection systems to identify unusual access patterns, multiple-account behaviour, and potential bot activity.

Most web browsers allow you to control cookie settings through the browser's preferences menu. You can instruct your browser to refuse all cookies or to notify you when a cookie is being set. Please note that disabling strictly necessary cookies will prevent you from logging into your crickx app account and using the platform's core features. crickx app does not use third-party advertising cookies and does not participate in cross-site advertising networks.

crickx app does not sell or rent Member data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: To process deposits and withdrawals in BDT, we share relevant financial and identity data with our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each processor handles your data in accordance with its own privacy policy and applicable financial regulations.
• Game providers: When you access casino games through crickx app Casino, your session data (account identifier, game selection, wager amounts) is shared with the relevant game provider — such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, or Spribe — solely to facilitate game delivery and calculate outcomes. These providers do not receive your name, contact details, or payment method information.
• Identity verification partners: To fulfil our KYC obligations, we may share identity document data with accredited third-party verification services. These partners process your documents under strict data processing agreements and do not retain your data beyond the verification purpose.
• Legal and regulatory authorities: crickx app will disclose Member data to relevant authorities where required to do so by applicable law, court order, or where we are obliged to report suspicious activity under anti-money-laundering or counter-terrorism financing obligations. We do not notify Members of such disclosures where doing so would compromise an ongoing investigation.
• Responsible gaming organisations: Where a Member initiates a self-exclusion or where we are required to act under responsible gaming protocols, we may share relevant data with recognised responsible gaming support bodies to enforce exclusion lists and ensure the Member's protection across multiple platforms.
• Business successors: In the event that crickx app undergoes a merger, acquisition, or transfer of all or substantially all of its assets, Member data may be transferred to the successor entity. We will provide reasonable advance notice of any such transfer and the successor will be required to honour the commitments made in this Privacy Policy.

All third parties with whom crickx app shares personal data are required, by contract, to implement appropriate technical and organisational security measures and to process that data only for the purposes for which it was shared.

crickx app retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, to maintain a Member's account in an active or dormant state, or to comply with applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your membership and for a period of five (5) years after account closure, to allow resolution of any disputes, to satisfy financial record-keeping requirements, and to support anti-money-laundering audit obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later, in accordance with standard financial compliance requirements.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years following the transaction date.
• Support communications: Records of your interactions with the crickx app support team are retained for three (3) years from the date of the most recent interaction.
• Analytical and usage data: Anonymised, aggregated usage data may be retained indefinitely for the purposes of historical platform analysis and product development. This data cannot be used to identify individual Members.
• Marketing consent records: Records of your opt-in or opt-out status for marketing communications are retained for the lifetime of your account and for three (3) years following account closure.

When personal data is no longer required and its retention period has expired, crickx app securely destroys or anonymises that data. Secure destruction means that the data cannot be recovered or reconstructed through any reasonably available technical means.

As a crickx app Member, you hold meaningful rights over the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary delay. Your rights include:

• Right of access: You may request a full copy of all personal data that crickx app holds about you. We will provide this in a structured, commonly used, machine-readable format (such as PDF or CSV) within thirty (30) days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update many data fields directly through your account settings after crickx app Login; for data you cannot self-edit (such as KYC-verified identity data), contact our support team.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we may be required by law to retain certain categories of data (such as transaction records) for defined periods even after an erasure request is submitted.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that we transfer your personal data to you or, where technically feasible, directly to another controller, in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your data where that processing is based on legitimate interest. You also have an unconditional right to object to the use of your data for direct marketing purposes, including profiling for marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, contact the crickx app data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) BST business days and fulfil it within thirty (30) calendar days. Where a request is complex or where we receive a high volume of requests, we may extend this period by an additional thirty (30) days, with prior notification.

crickx app implements a layered security architecture to protect Member data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Transport Layer Security (TLS): All data in transit between your device and crickx app servers is encrypted using TLS 1.2 or higher. Connections that do not meet this standard are refused.
• Data encryption at rest: Sensitive personal data — including identity documents, payment method details, and password hashes — is encrypted using AES-256 at the storage layer. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to Member data is governed by a strict role-based access control (RBAC) system. Staff access is granted on a least-privilege basis — team members can only access the data categories required for their specific job function.
• Two-factor authentication (2FA): All crickx app internal systems require 2FA for staff login. Members are strongly encouraged to enable SMS OTP-based 2FA on their own accounts via account settings after crickx app Login.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and data exfiltration signals. Alerts trigger immediate investigation by our security team.
• Penetration testing: crickx app commissions independent security assessments of its platform on a regular basis. Findings are remediated according to severity, with critical vulnerabilities addressed as the highest priority.
• Incident response: In the event of a confirmed data breach that affects Member personal data, crickx app will notify affected Members and the relevant authorities within the timeframes required by applicable law. Notifications will be delivered via the email address registered to your crickx app account.

While crickx app takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. We recommend that Members use a strong, unique password for their crickx app Login credentials, enable 2FA, and never share their login details with any other person.

crickx app reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or enhancements to our platform's features. When we make material changes to this Policy, we will:

• Update the "Effective" date displayed at the top of this page and in the hero section above.
• Send a notification to the email address registered to your crickx app account, summarising the key changes in plain English.
• Display a prominent notice on the platform for a period of at least fourteen (14) days following the update.

Your continued use of the crickx app platform after a Privacy Policy update has been notified to you constitutes acceptance of the revised Policy. If you do not accept the revised terms, you should cease using the platform and may request account closure by contacting our support team.

For all data-related queries, rights requests, or privacy concerns, the crickx app support team is available in English, 24 hours a day, on Bangladesh Standard Time (BST, UTC+6). You may reach us at:

crickx app is committed to resolving all privacy-related concerns raised directly by Members. If, after contacting us, you remain unsatisfied with how your concern has been handled, you retain the right to escalate the matter through whatever dispute resolution mechanisms are available to you under applicable law in Bangladesh.