crikax Privacy Policy

crikax ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers with and uses the crikax platform. This Privacy Policy sets out, in a transparent and formal manner, the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share data, the security measures we apply to protect it, and the rights available to you as a data subject.

This Privacy Policy applies to all personal data collected by crikax through the crikax website (https://crikax.vip), the crikax mobile application (where available), and any other crikax-operated channel through which players access our Services. It applies to all registered players, prospective players who browse our platform, and any other natural person whose personal data we hold in connection with the provision of our Services to the Bangladesh market.

By registering a crikax account or by continuing to use the crikax platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Privacy Policy is incorporated by reference into the crikax Terms & Conditions. If you do not agree to this Privacy Policy, you must not register an account or use the crikax platform.

Where this Privacy Policy refers to "personal data", we mean any information relating to an identified or identifiable natural person — including but not limited to a name, identification number, mobile number, email address, online identifier, or location data. "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.

For the purposes of this Privacy Policy, crikax acts as the data controller in respect of the personal data of all registered players and platform users. As data controller, crikax determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner.

All data protection queries, subject access requests, rectification requests, erasure requests, and general privacy concerns should be directed to the crikax Data Protection contact at: [email protected]. We will respond to all data-related requests within a reasonable timeframe and in accordance with applicable data protection principles.

crikax collects personal data in a number of categories depending on the nature of your interaction with the platform. The table below summarises the categories of personal data we collect and the specific data points within each category.

crikax does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation. If any such data is inadvertently disclosed to crikax, it will be deleted promptly upon identification and will not be processed for any purpose.

crikax collects personal data through the following channels and mechanisms:

• Direct Collection at Registration: When you create a crikax account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• KYC Verification Submissions: When crikax requests identity verification, you upload or transmit documentation including ID scans and address proofs directly to crikax's secure KYC portal.
• Payment Processing: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, transaction metadata is captured by crikax's payment processing systems. Full payment account numbers are never stored — only partial references sufficient for verification purposes.
• Platform Activity: As you use the crikax platform — placing bets, playing games, claiming bonuses, and navigating between sections — crikax's systems automatically log gaming data, session data, and technical data associated with your account and device.
• Cookies and Tracking Technologies: crikax uses cookies, local storage, and similar tracking technologies to collect technical data about your device and browsing behaviour on the crikax platform. See Section 08 for full details.
• Customer Support Interactions: When you contact crikax via live chat, email, or any other support channel, the content of those communications and any data you provide within them is collected and associated with your account record.
• Third-Party Identity Verification Providers: Where crikax engages a third-party KYC or identity verification service provider to assist with age and identity checks, that provider may return verification results and associated data to crikax as part of the KYC process.

crikax processes your personal data for the following specific, explicit, and legitimate purposes:

• Account Registration and Management: To create, maintain, and administer your crikax player account, including updating account settings, managing responsible gaming tools, and processing account closure requests.
• Age and Identity Verification (KYC): To verify that you are at least 18 years of age and that the identity information provided at registration is accurate, as required by crikax's responsible gaming and anti-fraud obligations.
• Payment Processing: To process deposit transactions and withdrawal requests made via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records associated with your account.
• Provision of Gaming Services: To deliver the crikax gaming products and features you access, including cricket betting markets, live casino games, slots, bingo rooms, and crash games, and to maintain accurate records of your gaming activity.
• Bonus and Promotions Administration: To assess your eligibility for and to credit bonus offers and promotional rewards, and to detect and prevent bonus abuse.
• Fraud Prevention and Anti-Money Laundering (AML) Monitoring: To monitor transactions and gaming activity for patterns indicative of fraud, money laundering, match-fixing, or other prohibited conduct, and to report such activity to the relevant authorities as required.
• Customer Support: To respond to your enquiries, complaints, and disputes, and to maintain records of support interactions for quality and compliance purposes.
• Responsible Gaming Compliance: To operate and enforce responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion, and to fulfil obligations related to player protection.
• Platform Improvement and Analytics: To analyse aggregated, de-identified data about platform usage in order to improve crikax's products, services, and user experience. Individual player profiles are not used for commercial analytics without consent.
• Legal and Regulatory Compliance: To comply with applicable legal, regulatory, and contractual obligations, including responding to lawful requests from courts, regulators, or law enforcement authorities.

crikax processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: The majority of the personal data processing described in this Privacy Policy is necessary for the performance of the contract between crikax and you as a registered player — specifically, the contract constituted by the crikax Terms & Conditions. Without this processing, crikax cannot provide you with gaming services, process your deposits and withdrawals, or administer your account.
• Legal Obligation: Certain processing activities — in particular KYC identity verification, AML transaction monitoring, and record-keeping — are required by applicable law. crikax processes personal data for these purposes to comply with its legal obligations, regardless of your consent.
• Legitimate Interests: crikax processes certain personal data on the basis of its legitimate interests as an online gaming operator, including fraud detection and prevention, platform security, abuse monitoring, and internal analytics. In each case, crikax has assessed that its legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Where crikax processes personal data for purposes that are not strictly necessary for the performance of the contract or for compliance with a legal obligation — such as sending you promotional communications about new crikax offers and games — we will seek your explicit consent at the time of collection. You may withdraw your consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

crikax does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. crikax may disclose your personal data to the following categories of recipient only to the extent strictly necessary for the purposes described in this Privacy Policy:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of data within their systems.
• KYC and Identity Verification Providers: Where crikax engages a third-party identity verification service to conduct age and identity checks, that provider will receive the personal data and documentation necessary to perform the verification. All such providers are bound by contractual data protection obligations with crikax.
• Fraud Detection and AML Service Providers: crikax may share transaction data and account activity data with specialist fraud detection and AML compliance service providers for the purpose of identifying and preventing financial crime.
• IT and Hosting Infrastructure Providers: crikax uses third-party cloud hosting and infrastructure providers to operate the crikax platform. These providers process personal data on crikax's behalf as data processors and are contractually required to maintain appropriate security standards.
• Legal and Regulatory Authorities: crikax will disclose personal data to courts, law enforcement agencies, financial regulators, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. crikax will notify the affected player of such disclosure to the extent permitted by law.
• Professional Advisers: crikax may disclose personal data to its legal advisers, auditors, or accountants on a strictly confidential basis where necessary for the conduct of legal proceedings, regulatory compliance reviews, or financial audits.

crikax uses cookies and similar tracking technologies on the crikax platform. Cookies are small text files stored on your device by your browser at the instruction of the crikax web server. They enable crikax to recognise your device across sessions, maintain your login state, personalise your experience, and gather analytical data about platform usage.

crikax uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the crikax platform to function. They maintain your login session, remember your responsible gaming settings, and enable secure transaction processing. Strictly necessary cookies cannot be disabled without preventing you from using the platform.
• Performance and Analytics Cookies: These cookies collect aggregated information about how players use the crikax platform — which pages are visited most frequently, how long sessions last, and where errors occur. This information is used to improve the platform. These cookies do not identify individual players by name.
• Functional Cookies: These cookies allow the crikax platform to remember your preferences, such as your selected language, display settings, and in-game configuration choices, to provide a more personalised experience.
• Security Cookies: These cookies assist in the detection of fraudulent login attempts, session hijacking, and other security threats. They are set automatically when you log in to your crikax account.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse, delete, or receive notification of cookies. Please note that disabling strictly necessary cookies may impair your ability to log in to and use the crikax platform. For detailed guidance on managing cookies, consult the help documentation for your specific browser.

crikax retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce agreements that may arise. The following retention periods apply to the principal categories of personal data held by crikax:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with crikax's data destruction procedures. Anonymised data — from which it is not reasonably possible to identify any individual — may be retained indefinitely for statistical and analytical purposes.

crikax applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The security measures currently in place include, but are not limited to, the following:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the crikax platform is encrypted using 256-bit SSL/TLS encryption. This applies to login credentials, payment data, KYC document uploads, and all other data transfers.
• Password Hashing: Player passwords are never stored in plain text. crikax uses industry-standard cryptographic hashing algorithms to store password data in a form that cannot be reversed to reveal the original password, even in the event of a data breach.
• Two-Step Verification: crikax makes two-step (two-factor) verification available to all registered players. When enabled, login to a crikax account requires both the account password and a one-time code delivered to the registered mobile number.
• Access Controls: Access to personal data within crikax's internal systems is restricted on a strict need-to-know basis. Customer support agents, compliance officers, and technical staff are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and audited.
• Regular Security Audits: crikax conducts periodic reviews of its information security practices, including vulnerability assessments and penetration testing of its platform infrastructure.
• Incident Response Procedures: crikax maintains a documented data breach response procedure. In the event of a personal data breach that creates a risk to the rights and freedoms of affected players, crikax will notify the affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach.

As a data subject whose personal data is processed by crikax, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact crikax at [email protected] with the subject line "Privacy Request — [Your Registered Username]".

• Right of Access: You have the right to request a copy of the personal data that crikax holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed. crikax will provide this information within 30 days of receiving a valid request.
• Right to Rectification: You have the right to request that crikax corrects any personal data that is inaccurate or incomplete. If you become aware that any data held in your crikax account is incorrect, you may update it directly in your account settings or request a correction via support.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request that crikax permanently deletes your personal data. This right is subject to limitations where crikax is required by law to retain specific data — for example, financial transaction records and KYC documentation subject to mandatory retention periods. Where erasure is not possible for legal reasons, crikax will inform you of the specific legal basis for retaining the data.
• Right to Restriction of Processing: You have the right to request that crikax restricts the processing of your personal data in certain circumstances — for example, while a disputed accuracy claim is being resolved, or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that crikax transmits that data directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where crikax relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where crikax processes your personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

crikax will respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, of which crikax will notify you within the initial 30-day period. crikax will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

As part of its KYC verification process, crikax requires all registered players to confirm their date of birth and to submit documentary proof of age upon request. Where crikax has reasonable grounds to suspect that a registered player is under the age of 18, the account will be suspended immediately and all personal data associated with that account will be reviewed. If underage registration is confirmed, the account will be permanently closed and all associated data will be deleted to the extent permitted by applicable law.

If you are a parent or guardian and you believe that a person under your care has registered a crikax account or submitted personal data to crikax without your knowledge, please contact us immediately at [email protected]. crikax will investigate promptly and take appropriate action, including deletion of the minor's data where confirmed.

crikax reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, data processing practices, or platform functionality. When a material change is made, the revised Privacy Policy will be published on this page with an updated "Last Updated" date at the top of the document. In cases of significant changes that materially affect how your personal data is processed, crikax will provide advance notice by sending an email notification to your registered email address prior to the change taking effect.

Your continued use of the crikax platform following the publication of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the crikax platform and contact [email protected] to arrange the closure of your account.

crikax recommends that you review this Privacy Policy periodically. The current version of this Privacy Policy is always accessible at https://crikax.vip/privacy-policy.

For all privacy-related queries, data subject access requests, and data protection concerns, please contact the crikax Data Protection team through the following channels:

• Email: [email protected] (subject line: "Privacy Request — [Your Registered Username]")
• Live Chat: Available 24/7 in-app after logging in to your crikax account.
• Response Time: crikax acknowledges all privacy correspondence within 72 hours and resolves substantive requests within 30 calendar days.