cricxes Privacy
Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data cricxes collects, why we collect it, how it is used and protected, and what rights you hold over your information as a player on our platform.
This Privacy Policy applies to all individuals who visit, register on, or interact with the cricxes platform, including prospective players who browse without registering, registered account holders, and former account holders whose data is retained for legal compliance purposes. By accessing cricxes, you acknowledge that you have read and understood this Privacy Policy.
1 Data We Collect
cricxes collects personal data that is necessary to provide a safe, compliant, and high-quality betting and gaming experience. We collect only the data we genuinely need, and we are transparent about each category and the reason for its collection.
Registration and Identity Data
When you create an account on cricxes, we collect your full legal name, date of birth, residential address, email address, and Bangladesh mobile number. This data is required to establish your identity, confirm your eligibility to use the Platform (18+ only), and maintain your account in good standing.
Identity Verification (KYC) Documents
To comply with responsible gaming and anti-money laundering obligations, we may request copies of official identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also request proof of address in the form of a recent utility bill or bank statement. These documents are processed securely and used solely for verification purposes.
Financial and Transaction Data
cricxes records all deposit and withdrawal transactions on your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction reference numbers, amounts in Bangladeshi Taka (৳ BDT), and timestamps. This data is required to process payments, detect fraud, and maintain accurate financial records.
Gameplay and Betting Data
We maintain a detailed record of all betting activity on your account, including bets placed, odds accepted, game rounds played, winnings, losses, and bonus usage. This data is used to operate the Platform, settle disputes, detect irregular betting patterns, and comply with fair play obligations.
Technical and Device Data
When you access cricxes, we automatically collect technical information about your device and connection, including your IP address, browser type and version, operating system, device identifiers, time zone (Bangladesh Standard Time, UTC+6), and referring URL. This data helps us detect fraudulent access, maintain platform security, and improve user experience.
Communications Data
If you contact our support team via live chat, email, or any other channel, we retain a record of that correspondence including the content of your messages, the date and time of contact, and the resolution outcome. This data is used to manage your enquiry and improve our support quality.
Marketing Preferences
Where you have provided consent, we collect your marketing preferences — including which types of promotional communications you have opted in or out of. You may update your marketing preferences at any time through your account settings or by contacting support.
cricxes does not collect or store full payment card numbers (PAN). Card payments are processed by PCI-DSS-compliant payment processors who handle and tokenise card data on our behalf. We receive only a masked card reference for account matching purposes. We also do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification.
2 How We Use Your Data
cricxes processes your personal data on several lawful bases depending on the purpose. We use your data only for the purposes described below and do not engage in any processing that is incompatible with these stated purposes.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account registration and management | Identity data, contact data | Contract performance |
| Identity and age verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Fraud prevention and security monitoring | Technical data, transaction data, gameplay data | Legitimate interest / Legal obligation |
| Responsible gaming monitoring | Gameplay data, transaction data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Contract performance / Legitimate interest |
| Marketing communications (where consented) | Contact data, marketing preferences | Consent |
| Platform improvement and analytics | Technical data, gameplay data (aggregated) | Legitimate interest |
| AML and regulatory compliance | Identity data, transaction data, KYC documents | Legal obligation |
Marketing Communications
cricxes may send you promotional emails, SMS notifications, or in-platform messages about new games, deposit bonuses, seasonal promotions (including BPL, IPL, Pohela Boishakh, and Eid campaigns), and other offers — but only where you have given your explicit consent to receive such communications. Each marketing message will include a clear and functional opt-out mechanism. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Automated Decision-Making
cricxes uses automated systems to detect unusual account activity, including potential fraud, bonus abuse, and underage gambling indicators. Where an automated system flags your account for review, a member of our compliance team will conduct a manual review before any action is taken. You have the right to request human review of any decision that significantly affects you.
We use aggregated, anonymised gameplay data to identify patterns associated with problem gambling behaviour. This analysis enables us to proactively reach out to players who may benefit from responsible gaming support, including access to deposit limits, cool-off periods, and self-exclusion tools. For more information, please visit the Responsible Gaming page.
3 Data Sharing & Third Parties
cricxes does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with trusted partners who are contractually bound to process it strictly in accordance with our instructions and applicable data protection standards.
Categories of Third-Party Recipients
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank receive the financial data necessary to process your deposits and withdrawals. These partners operate under their own regulated privacy frameworks.
- KYC and Identity Verification Providers: We engage specialist third-party KYC providers to verify the identity and age of players. These providers receive only the data necessary to perform the verification and are bound by strict confidentiality obligations.
- Fraud Prevention and Security Services: We share technical and transaction data with fraud prevention partners to identify and block malicious activity, including account takeovers, payment fraud, and bot-driven abuse.
- Game and Software Providers: Where you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those providers may receive pseudonymised gameplay data to operate their games and settle rounds. No directly identifiable personal data is shared with game studios beyond what is technically required.
- Analytics and Platform Infrastructure: We use third-party cloud infrastructure and analytics tools to operate and improve the Platform. These providers process data on our behalf under data processing agreements and do not use your data for their own purposes.
- Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
International Data Transfers
Some of our third-party partners may process data outside of Bangladesh. Where such transfers occur, we implement appropriate safeguards — including standard contractual clauses or equivalent mechanisms — to ensure that your data receives a level of protection consistent with this Privacy Policy. If you have questions about specific transfer mechanisms, please contact our Data Protection Officer at the address provided in Section 8.
cricxes has never sold and will never sell player personal data to advertisers, data brokers, or any other commercial third party. Data sharing with our partners is strictly limited to what is necessary for the operational and legal purposes described in this Policy.
4 Cookies & Tracking
cricxes uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse how the site is used. This section explains the types of cookies we use and how you can manage them.
What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, maintain login sessions, and collect information about how you interact with the site. Cookies set by cricxes are first-party cookies; cookies set by our analytics and security partners are third-party cookies.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember cart/bet slip state, enable security features. Cannot be disabled without breaking core functionality. | Session / Up to 24 hours |
| Functional | Remember your language preference, display settings, and responsible gaming limits you have set. | Up to 12 months |
| Analytics | Collect aggregated, anonymised data about how players navigate the Platform to help us identify and fix usability issues. | Up to 24 months |
| Security & Fraud Prevention | Detect bots, identify suspicious login patterns, and fingerprint devices associated with fraudulent activity. | Up to 6 months |
| Performance | Measure page load times and game performance metrics to ensure a consistent experience across devices and connection speeds. | Up to 6 months |
Managing Your Cookie Preferences
You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or prompt you before a cookie is set. Please note that disabling strictly necessary cookies will prevent core Platform functionality such as logging in and maintaining your bet slip. Instructions for managing cookies in popular browsers are available on the respective browser's support pages. Adjusting cookie settings does not affect data already collected prior to the change.
If you access cricxes via a mobile browser on Android or iOS, the same cookie principles apply. Mobile browsers offer equivalent cookie management controls in their settings menus. Device-level advertising identifiers (such as Google Advertising ID or Apple IDFA) are not collected or used by cricxes.
5 Data Security
Protecting your personal data is a core operational priority at cricxes. We implement a layered security architecture that combines technical, organisational, and procedural controls to safeguard your data against unauthorised access, disclosure, alteration, or destruction.
Technical Safeguards
- SSL/TLS Encryption: All data transmitted between your device and cricxes is encrypted using industry-standard TLS 1.2 or higher. This applies to all login sessions, payment flows, and support communications.
- Data Encryption at Rest: Sensitive personal data stored on our servers — including KYC documents and financial records — is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, multi-factor authentication, and activity logging.
- Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, Web Application Firewalls (WAF), and real-time intrusion detection systems that monitor for suspicious activity around the clock.
- Penetration Testing: cricxes conducts regular penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
Organisational Safeguards
All cricxes staff and contractors who handle personal data receive mandatory data protection training. Our data handling procedures are reviewed and updated regularly. Staff are prohibited from accessing player data for any purpose outside their designated role, and all data access is subject to audit logging.
Data Breach Response
In the event of a personal data breach that poses a risk to affected individuals, cricxes will notify affected players without undue delay once the breach has been identified and assessed. Notification will be sent to the email address registered on your account and will include the nature of the breach, the categories of data affected, and the steps we are taking to contain and remediate the incident.
While cricxes invests heavily in platform security, the security of your account also depends on you. Choose a strong, unique password for your cricxes account, do not share your login credentials with anyone, and log out of your account when using a shared or public device. If you suspect your account has been compromised, contact our support team immediately via live chat or at support@cricxes.
End-to-End Encryption
Every connection to cricxes is protected by TLS encryption. Your login credentials, payment details, and personal information travel over the network in fully encrypted form at all times.
KYC & Age Verification
Our Know Your Customer process verifies the identity and age of every player. This protects both players and the platform, ensuring that only eligible adults aged 18 and above access the service.
No Data Sales, Ever
cricxes has a strict policy against selling or renting player data to advertisers or data brokers. Your personal information is used solely to operate and improve the Platform for your benefit.
Consent-Based Marketing
We send promotional communications only to players who have explicitly opted in. Every marketing message includes a clear unsubscribe option. We respect your inbox and your preferences.
Defined Retention Periods
We retain your data only for as long as it is needed — for account operation while active, and for five years after closure to meet AML compliance requirements. Data is securely deleted thereafter.
Your Rights, Respected
You have the right to access, correct, delete, and port your personal data. Submit a request to privacy@cricxes and our Data Protection Officer will respond within 30 days.
6 Data Retention
cricxes retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The retention periods below represent our standard practice.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| KYC documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Financial transaction records | Duration of account + 5 years post-closure | AML, financial reporting obligations |
| Gameplay and betting history | Duration of account + 2 years post-closure | Dispute resolution, fair play audit |
| Support communications | 3 years from date of communication | Quality assurance, dispute resolution |
| Marketing preference records | Until consent is withdrawn + 1 year | Evidence of consent basis |
| Technical and device data (logs) | Up to 12 months | Security monitoring, fraud detection |
| Anonymised analytics data | Up to 36 months | Platform improvement (no personal identifiers) |
When personal data reaches the end of its applicable retention period, it is securely and irreversibly deleted or anonymised so that it can no longer be linked to an identifiable individual. If you request deletion of your data before the natural expiry of a retention period, we will action that request to the fullest extent permissible under applicable law — noting that certain data must be retained for legal compliance reasons even after an account is closed.
Accounts that have had no login activity for 12 consecutive months are classified as dormant. Prior to classifying an account as dormant, we will contact you at your registered email address. Dormant account data is subject to the standard retention periods above. If you wish to have your dormant account permanently closed and your data deleted (subject to legal retention obligations), please contact support@cricxes.
7 Your Privacy Rights
As a player on cricxes, you hold meaningful rights over your personal data. We are committed to upholding these rights and to responding to any request you submit promptly, professionally, and without charge in the vast majority of cases.
You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days of receiving your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account profile corrections can also be made directly in your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
You may request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of the data or the lawfulness of our processing.
Where processing is based on your consent or the performance of a contract, you may request that we provide your data in a portable, machine-readable format for transfer to another service.
You have the right to object to processing based on our legitimate interests, including profiling. You also have the absolute right to object to processing for direct marketing purposes at any time.
You have the right to request human review of any decision made solely by automated processing that produces a significant effect on you, such as account suspension or bonus restriction.
Where processing relies on your consent — for example, marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
How to Exercise Your Rights
To exercise any of the rights described above, please submit a written request to our Data Protection Officer at privacy@cricxes. Please include your full name, the email address registered on your cricxes account, and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing your request in order to prevent unauthorised access to your data.
We will respond to all valid requests within 30 calendar days. In complex cases or where a high volume of requests is received simultaneously, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
Exercising your privacy rights is free of charge in the vast majority of cases. We reserve the right to charge a reasonable administrative fee only where requests are manifestly unfounded, excessive, or repetitive in nature. In such cases, we will notify you of any applicable fee before proceeding.
8 Contact & DPO
If you have any questions, concerns, or complaints about this Privacy Policy or about the way cricxes processes your personal data, we encourage you to contact us in the first instance. We take all privacy enquiries seriously and aim to resolve them promptly and fairly.
Data Protection Officer
cricxes has appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy, ensuring compliance with applicable privacy obligations, and serving as the primary point of contact for all data subject requests. You may contact the DPO directly using the details below.
Policy Updates
cricxes reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to our services. When we make a material change to this Policy, we will notify registered players via email and display a prominent notice on the Platform for at least 14 days prior to the change taking effect. The updated Policy will always show its effective date at the top of the page. Continued use of the Platform following the effective date of an updated Policy constitutes your acknowledgement of the changes.
We recommend reviewing this Privacy Policy periodically so that you remain informed about how cricxes protects your data. Previous versions of this Policy are available on request by contacting our DPO.
Complaints
If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in Bangladesh. We will always provide you with any information we hold that is relevant to the escalation of your complaint and cooperate fully with any regulatory enquiry.
This Privacy Policy was last reviewed and updated on 1 January 2026. cricxes conducts a full review of this Policy at least once every 12 months. The next scheduled review is January 2027.
Ready to Explore cricxes?
Now that you understand how we protect your data, dive into the full cricxes experience — cricket betting, live casino, slots, and more, all in a safe and SSL-secured environment built for Bangladesh players.