cricaex Privacy Policy

1. Data We Collect

Information You Provide Directly

When you register for a cricaex account, interact with our support team, or complete identity verification, you provide us with information directly. This includes:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and a password of your choosing.
• Identity verification (KYC) documents: Copies of government-issued identification such as National Identity Card, passport, or driving licence; proof of address documents such as utility bills or bank statements issued within the last three months.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction references. Full payment card numbers are never stored on cricaex servers.
• Support communications: Any messages, emails, or live chat transcripts exchanged between you and the cricaex support team.
• Responsible gaming self-assessments: Information you voluntarily provide when setting deposit limits, time-out periods, or self-exclusion preferences.

Information Collected Automatically

When you access and use the cricaex platform, certain technical and behavioural data is collected automatically through your browser, device, and our platform infrastructure:

• Device and browser data: IP address, device type and model, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, features used, games played, bets placed, session duration, click paths, and timestamps of activity.
• Transaction data: Deposit amounts, withdrawal requests, bet history, game history, bonus usage, and account balance movements.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply jurisdiction-appropriate restrictions and to detect unusual access patterns that may indicate account compromise.
• Cookie and tracking data: Data collected via cookies, local storage, pixel tags, and similar technologies as described in the Cookies section of this policy.

Information from Third Parties

In certain circumstances, cricaex may receive information about you from trusted third-party sources, including:

• Identity verification providers: Third-party KYC and anti-fraud services that cross-reference the identity documents you submit against official databases to confirm authenticity.
• Payment processors: Transaction status updates and fraud signals from bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud prevention networks: Shared fraud intelligence from industry networks used to identify accounts associated with known fraudulent activity, money laundering, or multi-accounting behaviour.

2. How We Use Your Data

cricaex uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose incompatible with the reason for which it was originally collected. The primary purposes for which we process your data are as follows:

Account Management and Service Delivery

The most fundamental use of your personal data is to create and maintain your cricaex account and to deliver the platform services you have requested. This includes processing your registration, verifying your identity, managing your account balance, recording your betting and gaming activity, and providing access to all platform features. Without this processing, cricaex cannot function as a platform.

Payment Processing

Your financial data is used exclusively to process deposits to and withdrawals from your cricaex wallet via your chosen payment method — bKash, Nagad, Rocket, Upay, or your designated bank account. Payment data is shared with the relevant payment service provider only to the extent required to complete the transaction. cricaex does not store full payment card numbers or mobile banking PINs on its servers at any time.

Identity Verification and Fraud Prevention

We are required to verify the identity of all players as part of our Know Your Customer (KYC) obligations. This verification process uses the identity documents you provide alongside automated cross-referencing with third-party identity and fraud databases. The purpose of this processing is to confirm that you are who you say you are, that you are of legal gambling age (18+), and that your account is not being used for money laundering, payment fraud, or any other prohibited activity.

Legal and Regulatory Compliance

Certain data processing activities are required by law or by our obligations as an online gaming platform. These include maintaining transaction records for audit purposes, responding to lawful requests from law enforcement or regulatory authorities, and fulfilling our anti-money laundering (AML) and responsible gaming obligations. Data processed for legal compliance purposes will be retained for the legally mandated period even if you close your account.

Responsible Gaming Monitoring

cricaex uses your usage data, transaction history, and behavioural patterns to monitor for indicators of problem gambling. Where our systems or support team identify patterns that may suggest a player is experiencing difficulty — such as rapidly escalating deposit amounts, extended uninterrupted play sessions, or repeated self-exclusion requests — we may reach out proactively to offer support resources. This processing is carried out in the interests of player welfare and forms a core part of our responsible gaming commitment.

Platform Improvement and Analytics

Aggregated and anonymised usage data is analysed to understand how players interact with the cricaex platform, identify areas for improvement, optimise game selection, and improve the overall user experience. This analytics processing does not involve making decisions about individual players and is based on anonymised data sets wherever possible.

Marketing and Promotional Communications

With your explicit consent, cricaex may use your contact details to send you information about bonuses, promotions, new game launches, seasonal offers (such as Eid promotions or BPL season specials), and other marketing communications. You may withdraw this consent at any time by updating your preferences in account settings or by contacting our support team. Withdrawal of marketing consent will not affect the lawfulness of processing carried out prior to withdrawal.

3. Data Sharing & Disclosure

cricaex may share your personal data with the following categories of third parties, always under contractual obligations that require them to handle your data securely and only for the specified purpose:

Payment Service Providers

To process deposits and withdrawals, cricaex shares relevant transaction data with your chosen payment service provider — which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or Islami Bank. The data shared is limited to what the payment provider requires to authorise and complete the transaction. Each payment provider operates under its own privacy policy, which governs how it handles the data it receives.

Identity Verification and KYC Providers

To fulfil our legal obligation to verify player identity and prevent underage gambling, cricaex shares KYC document data with authorised third-party identity verification services. These providers are contractually bound to process the data solely for verification purposes and to maintain the same standard of data security as cricaex itself.

Fraud Prevention and Security Services

cricaex uses third-party fraud detection and cybersecurity services that may process certain technical data — such as IP addresses, device fingerprints, and behavioural patterns — to identify and prevent fraudulent activity. These services operate under strict data processing agreements and are not permitted to use the data they receive for any purpose other than fraud prevention and platform security.

Game Software Providers

Casino games on the cricaex platform are provided by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. To allow you to play these games, your account identifier and session token are shared with the relevant game provider. Game providers do not receive your full name, payment details, or identity documents. Their use of session data is governed by their own privacy and data security policies.

Legal and Regulatory Disclosure

cricaex may be required to disclose personal data in response to a valid court order, subpoena, law enforcement request, or instruction from a competent regulatory authority. We will notify affected players of any such disclosure wherever we are legally permitted to do so. Where disclosure is required on an urgent basis to prevent serious harm or criminal activity, cricaex may comply with the request prior to providing notification.

Business Transfers

In the event that cricaex undergoes a merger, acquisition, sale of assets, or restructuring, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, cricaex will provide reasonable advance notice to affected players and ensure that the acquiring entity is bound by obligations no less protective than those set out in this Privacy Policy.

4. Cookies & Tracking Technologies

cricaex uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies Used

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the functioning of the cricaex platform. All other cookie categories can be managed through your browser settings or by contacting our support team. Please note that disabling functional or analytics cookies may affect certain platform features and your overall experience on cricaex.

Most modern browsers provide controls to view, block, or delete cookies at any time. Refer to your browser's help documentation for instructions specific to your browser and version. Clearing cookies will log you out of your cricaex session and will reset any locally stored preferences.

Local Storage and Similar Technologies

In addition to cookies, cricaex may use browser local storage and session storage to hold temporary data required for platform functionality — such as in-progress game state data and session tokens. This data is stored locally on your device and is not transmitted to third parties. It is cleared when you log out or close your browser session, depending on the type of storage used.

5. Data Security

cricaex takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no digital platform can guarantee absolute security, cricaex continually reviews and updates its security practices to reflect the current threat landscape.

Technical Security Measures

• SSL/TLS encryption: All data transmitted between your browser or app and the cricaex platform is encrypted using TLS 1.2 or higher. Our SSL certificate is visible as the padlock icon in your browser address bar.
• Encrypted data storage: Sensitive personal data — including identity documents and payment information — is stored in encrypted form in access-controlled environments. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within cricaex is restricted on a need-to-know basis. Employees and contractors who require access to personal data to perform their role are granted the minimum level of access necessary and are bound by confidentiality obligations.
• Intrusion detection and monitoring: cricaex operates continuous network monitoring and intrusion detection systems to identify and respond to suspicious activity in real time.
• Two-factor authentication (2FA): Players are encouraged to enable two-factor authentication on their cricaex accounts. 2FA adds a second layer of verification beyond your password, significantly reducing the risk of unauthorised account access.

Reporting a Security Concern

If you believe your cricaex account has been accessed without your authorisation, or if you discover a potential security vulnerability in the cricaex platform, please contact us immediately at [email protected]. We take all security reports seriously and will investigate and respond promptly. Please do not attempt to exploit any vulnerability you discover — responsible disclosure is always appreciated.

6. Data Retention

cricaex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Standard Retention Periods

Where data must be retained beyond the closure of your account for legal or regulatory reasons, it will be stored in a restricted environment accessible only to compliance and legal personnel. It will not be used for any other purpose during this extended retention period.

7. Your Privacy Rights

As a cricaex player, you hold a number of rights in relation to your personal data. cricaex is committed to honouring these rights promptly and without undue burden. To exercise any of the rights listed below, please contact our support team at [email protected] with your account details and a clear description of your request.

Right of Access

You have the right to request a copy of the personal data that cricaex holds about you. Upon receiving a verified access request, cricaex will provide you with a summary of your personal data in a structured, commonly used format within a reasonable timeframe. There is no charge for a standard access request.

Right to Rectification

If any personal data that cricaex holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details — such as your email address and contact number — directly through your account settings. For corrections to identity data or KYC records, please contact our support team and provide supporting documentation.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute — cricaex is required by law to retain certain categories of data (such as transaction records and KYC documents) for defined periods even following account closure. Where erasure is not possible due to legal obligations, we will inform you of the reason and restrict processing of the relevant data to the minimum required.

Right to Restriction of Processing

You have the right to request that cricaex restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing pending a determination of whether cricaex has overriding legitimate grounds to continue.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to cricaex in a structured, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of an objection to marketing, cricaex will immediately cease all marketing communications to you. You also have the right to object to processing carried out on the basis of our legitimate interests, although such objections are subject to a balancing assessment.

Right to Withdraw Consent

Where cricaex processes your personal data on the basis of your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can withdraw consent through your account settings or by contacting our support team.

8. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cricaex handles your personal data, please contact our support team in the first instance. We aim to respond to all privacy-related enquiries within 5 business days.

Email: [email protected]
Support Hours: 24/7 — English and Bengali agents available (BST, UTC+6)

If you are not satisfied with the response you receive from our support team regarding a privacy concern, you have the right to escalate your complaint. cricaex takes all unresolved privacy complaints seriously and will conduct a thorough internal review upon escalation request.

Policy Updates

cricaex reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and update the "Last Updated" date at the top of this page. Your continued use of the cricaex platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page regularly.