crikix Privacy Policy

crikix collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party payment providers and identity verification services. The categories of data we collect are described below.

1.1 Registration and Account Data

When you create a crikix account, we collect the following information:

• Full legal name
• Date of birth (used for age verification — players must be 18 or older)
• Email address
• Mobile phone number
• Residential address (city, district, country — Bangladesh)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka / BDT or USDT)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering requirements and to verify player identity before processing withdrawals, crikix may collect:

• Copies of government-issued identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement dated within 90 days)
• Selfie or liveness verification image for document matching
• Proof of ownership of payment methods used (e.g., bKash account screenshot, Nagad statement)

1.3 Financial Transaction Data

When you make a deposit or withdrawal, crikix records:

• Transaction reference numbers and amounts
• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT)
• Mobile wallet numbers or masked card numbers (we do not store full card numbers)
• Transaction timestamps and IP address at the time of transaction

1.4 Gameplay and Betting Data

• Bet history, game session logs, and outcomes
• Sports markets selected, odds accepted, and stake amounts
• Casino game titles played, rounds completed, wins and losses
• Bonus usage and wagering progress

1.5 Technical and Device Data

Collected automatically when you access the crikix platform:

• IP address and approximate geographic location (country, division — e.g., Dhaka, Chittagong)
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Pages visited, session duration, and referral source
• Cookie identifiers and session tokens (see Section 3)

1.6 Communications Data

If you contact crikix support via email or live chat, we retain records of those communications, including the content of your messages, timestamps, and the resolution reached. This data is used to maintain service quality and resolve disputes.

crikix processes personal data only for specified, legitimate purposes. The table below summarises our key processing activities and the lawful basis for each:

crikix does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on players, except where required to implement responsible gaming interventions or fraud controls. Where automated systems are used for these purposes, you have the right to request human review of any decision that significantly affects your account.

crikix uses cookies and similar tracking technologies to operate the platform securely, remember your session, and understand how players use the site. We do not use advertising cookies, cross-site tracking pixels, or share cookie data with third-party ad networks.

Types of cookies used by crikix:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and ensure the security of your account during a visit. These cookies cannot be disabled.
• Functional cookies: These remember your platform preferences such as language settings, preferred payment method display, and odds format. Disabling them may reduce platform functionality.
• Analytics cookies: crikix uses privacy-respecting first-party analytics to understand aggregate page usage, identify technical errors, and improve the platform experience. These cookies collect anonymised data and are not linked to individual player identities.

Cookie duration: Session cookies are deleted when you close your browser. Persistent cookies set by crikix have a maximum lifespan of 12 months, after which they expire and are renewed only upon your continued use of the platform.

Managing cookies: You may configure your browser to refuse cookies or to alert you when cookies are being set. Instructions for managing cookies vary by browser; consult your browser's help documentation. Note that disabling strictly necessary cookies will prevent you from logging in to your crikix account.

crikix does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only with parties that maintain appropriate data protection standards.

4.1 Payment Processors

To facilitate deposits and withdrawals, crikix shares transaction-relevant data with our payment partners including bKash, Nagad, Rocket, Upay, and card-processing networks (Visa, Mastercard). These partners receive only the data necessary to authorise and process your transaction. They are bound by their own regulatory obligations and privacy policies.

4.2 Identity Verification Providers

When KYC verification is required, crikix uses trusted third-party identity verification services to check the authenticity of submitted documents. These providers process your identification data under strict confidentiality agreements and may not use your data for any purpose other than the verification service contracted by crikix.

4.3 Platform Software Providers

Our casino and sportsbook games are provided by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (game round IDs, bet amounts, outcomes) in order to deliver their services and resolve disputes. They do not receive your name, contact details, or payment information.

4.4 Legal and Regulatory Disclosure

crikix may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, a valid court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

4.5 Business Transfers

In the event that crikix undergoes a merger, acquisition, or sale of business assets, player data held by crikix may be transferred to the acquiring entity as part of that transaction. We will notify affected players via their registered email address before any such transfer takes place and confirm that the acquiring entity will be bound by this Privacy Policy.

crikix retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The table below outlines our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an individual player. Data held in backup systems is purged in line with our standard backup rotation schedule.

If you request deletion of your account and personal data under your rights (see Section 6), crikix will delete or anonymise your data within 30 days, except where retention is required by law (for example, financial transaction records required under applicable banking regulations).

As a player on the crikix platform, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our Data Protection team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of all personal data crikix holds about you at any time. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly through your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will comply within 30 days unless retention is required for legal, regulatory, or fraud-prevention purposes (see Section 5).
• Right to restrict processing: You may request that we limit how we use your data — for example, if you contest its accuracy or object to a particular processing activity — while a review is conducted.
• Right to data portability: Where data has been provided by you and processed on the basis of consent or contract, you may request that we provide it in a machine-readable format for transfer to another service.
• Right to object: You may object to processing carried out on the basis of our legitimate interests, including processing for analytics or responsible gaming profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

All rights requests will be acknowledged within 5 business days. We may require you to verify your identity before processing a rights request to prevent unauthorised disclosure of personal data. We will complete the substantive response within 30 calendar days. For complex or multiple requests, this period may be extended by a further 30 days, and we will notify you accordingly.

crikix implements a layered approach to data security, combining technical controls, organisational policies, and ongoing monitoring to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Technical safeguards include:

• SSL/TLS encryption: All data in transit between your browser or app and crikix servers is encrypted using 128-bit SSL/TLS. No data is transmitted over unencrypted channels.
• Encrypted data storage: Sensitive data fields including passwords, national ID numbers, and payment method identifiers are stored using one-way hashing or AES-256 encryption at rest. Passwords are never stored in recoverable form.
• Firewalls and intrusion detection: crikix infrastructure is protected by enterprise-grade firewall rules and real-time intrusion detection systems that flag and block anomalous access patterns.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. All internal access is logged, and privileged access requires multi-factor authentication.
• Penetration testing: crikix conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Organisational safeguards include:

• Data protection training for all staff who handle personal data
• A documented data breach response procedure including notification timelines
• Contractual data processing obligations imposed on all third-party vendors
• Regular internal audits of data handling practices

In the event of a data breach that poses a risk to your personal data, crikix will notify affected players via their registered email address within a reasonable timeframe, describing the nature of the breach, the data affected, and the remediation steps taken.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way crikix handles your personal data, please contact our Data Protection team using the details below.

Data Protection Contact:
Email: [email protected]
Subject line: Privacy Rights Request or Privacy Enquiry
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)

When submitting a privacy request, please include your registered account username and a clear description of your request so we can process it efficiently. We may ask you to verify your identity before acting on any request that involves disclosure or deletion of personal data.

Complaints: If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint. crikix takes all privacy complaints seriously. Unresolved complaints may be escalated in writing to our senior management team at the same email address, marked for the attention of the Privacy Compliance Officer. We aim to resolve all escalated complaints within 15 business days.

Policy updates: This Privacy Policy was last reviewed and updated in January 2026. crikix reserves the right to amend this policy at any time. Material changes will be communicated to registered players via their account email address at least 7 days before the updated policy takes effect. The version published on this page is always the current operative version.