criecx Privacy Policy

1 Data Controller Information

criecx ("criecx", "Platform", "we", "us", "our") operates as the data controller for all personal information collected from players who register and use the criecx platform. As the data controller, criecx determines the purposes for which personal data is processed and the means by which that processing is carried out, in accordance with applicable data protection principles.

criecx is an online casino and sports betting platform serving players in Bangladesh. All data processing activities described in this Privacy Policy are conducted for the purposes of operating a safe, fair, and compliant gaming platform for adult players aged 18 and above. criecx is committed to handling all personal data in a manner that is lawful, transparent, and proportionate to the purposes for which it was collected.

For all privacy-related enquiries, data subject requests, or concerns about how criecx processes your personal information, you may contact the criecx Data Protection team using the contact details provided in the Contact & Support section of this platform. All privacy correspondence is handled in English and responses are typically provided within 5 business days during Bangladesh Standard Time (BST, UTC+6) business hours.

2 What Data We Collect

criecx collects personal data from players through several channels: directly from you when you register an account or submit a support request, automatically as you interact with the platform, and in limited circumstances from third-party verification and payment providers. The categories of personal data we collect are described in the table below.

criecx does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to criecx, please contact us immediately via live chat so that the relevant records can be identified and permanently deleted.

3 How We Use Your Data

criecx processes your personal data only for legitimate, defined purposes. We do not sell your personal data to third parties, and we do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which criecx processes personal data are as follows:

• Account creation and management: To register your criecx account, verify your identity, maintain your account records, and administer your preferences and settings.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported banking channels; to maintain transaction records; and to reconcile account balances.
• Service delivery: To provide you with access to the criecx game library, sports betting markets, live casino, and all other platform features, in accordance with the criecx Terms & Conditions.
• Identity and age verification (KYC): To verify that you are who you claim to be, that you are aged 18 or above, and that you are entitled to use the platform from your location in Bangladesh.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other financial crimes. criecx operates automated and manual monitoring systems for this purpose.
• Responsible gaming obligations: To monitor player behaviour for signs of problem gambling, to apply and enforce self-exclusion and deposit limit settings, and to fulfil criecx's responsible gaming commitments as described in the Responsible Gaming Policy.
• Customer support: To respond to your support requests, live chat queries, complaints, and feedback in a timely and accurate manner.
• Platform improvement: To analyse usage patterns, identify technical issues, improve game offerings, and optimise the player experience — based on anonymised and aggregated data wherever possible.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform updates via email or in-platform messaging, where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your account settings.
• Legal and regulatory compliance: To comply with applicable law, respond to lawful requests from regulatory or law enforcement authorities, and to enforce the criecx Terms & Conditions.

4 Data Sharing & Third Parties

criecx does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your data with carefully selected third parties where it is necessary to operate the platform, fulfil legal obligations, or protect the interests of players. All third-party data sharing arrangements are governed by strict data processing agreements that require third parties to handle your data in accordance with applicable data protection standards.

The categories of third parties with whom criecx may share personal data are:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC service providers who assist criecx in verifying player identity and age in compliance with anti-fraud and AML requirements.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — who may receive limited technical data (such as player session tokens) necessary to deliver their games through the criecx platform. These providers do not receive your full identity or financial records.
• IT infrastructure and hosting providers: Cloud hosting, data storage, and cybersecurity providers who process data on behalf of criecx under binding data processing agreements.
• Analytics providers: Service providers who help criecx understand platform usage patterns using anonymised or pseudonymised data.
• Legal and regulatory authorities: Where criecx is required by law, court order, or regulatory direction to disclose personal data — for example, in connection with an AML investigation or an underage gambling report.

criecx will never share your personal data with other gambling operators, data brokers, or advertising networks without your explicit prior consent. If a proposed new category of data sharing arises in the future that is materially different from those described above, criecx will update this Privacy Policy and notify players via the platform before such sharing begins.

5 Cookies & Tracking Technologies

criecx uses cookies and similar tracking technologies on the platform to ensure its correct functioning, improve your experience, analyse usage, and — where you have consented — deliver relevant promotional content within the criecx platform. A cookie is a small text file placed on your device by the criecx platform when you visit. It allows the platform to recognise your device on subsequent visits and maintain your session state.

The types of cookies used by criecx are categorised as follows:

• Strictly necessary cookies: These cookies are essential for the criecx platform to function. They enable core services such as account login sessions, game loading, balance display, and security checks. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the criecx platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. This data helps criecx improve the platform over time.
• Functional cookies: These cookies remember your preferences — such as your chosen language settings, last-visited game categories, and responsible gaming limit selections — so that you do not have to reset them on each visit.
• Targeting and personalisation cookies: These cookies are used within the criecx platform to display promotional offers and bonus notifications that are more relevant to your gaming interests. criecx does not use targeting cookies for external advertising networks.

You can manage cookie preferences through your web browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will impair your ability to log in and use the criecx platform. Disabling performance or functional cookies will not prevent access but may reduce the quality of your experience.

6 Data Retention & Deletion

criecx retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The specific retention periods applied by criecx are summarised below:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years after account closure, in order to comply with anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years in accordance with financial record-keeping obligations applicable to payment processing activities.
• Customer support communications: Retained for 3 years from the date of the most recent interaction, unless the communication is related to a dispute or legal claim, in which case it is retained for the duration of the relevant proceedings plus 2 years.
• Marketing consent records: Retained for the duration of your marketing consent plus 2 years after consent is withdrawn, as evidence of the consent that was given.
• Responsible gaming records: Self-exclusion records, cooling-off periods, and deposit limit history are retained for a minimum of 7 years after account closure to support player protection obligations.
• Technical and usage logs: Retained in anonymised or aggregated form for up to 24 months for platform performance and analytics purposes.

When personal data is no longer required for its original purpose and no legal retention obligation applies, criecx will securely delete or irreversibly anonymise that data. Deletion processes are carried out on a scheduled basis by criecx's data management team. You may submit a deletion request at any time — see the Your Privacy Rights section below for how to do so.

7 Your Privacy Rights

As a criecx player registered in Bangladesh, you hold the following rights with respect to your personal data. criecx is committed to honouring these rights promptly and without unnecessary obstruction. All requests should be submitted via live chat within your account dashboard or by email to [email protected] (plain text only — do not use mailto links). criecx aims to respond to all rights requests within 5 business days.

8 Data Security Measures

criecx takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, criecx applies industry-standard security practices across all aspects of its data processing infrastructure.

The key security measures implemented by criecx include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the criecx platform is protected by 256-bit SSL/TLS encryption, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Data encryption at rest: Sensitive personal data stored in criecx's databases — including identity documents, financial records, and password hashes — is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): criecx offers 2FA for all player accounts. Enabling 2FA provides an additional layer of protection beyond your password, significantly reducing the risk of unauthorised account access.
• Access controls: Internal access to personal data is strictly limited on a need-to-know basis. criecx staff members are granted only the minimum level of data access required to perform their specific job functions.
• Automated fraud and intrusion monitoring: criecx operates 24/7 automated monitoring systems that detect and alert on suspicious login attempts, unusual transaction patterns, and potential data breach indicators.
• Regular security audits: criecx conducts periodic security reviews and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All criecx staff who handle personal data receive mandatory data protection and security training as part of their onboarding and on an ongoing annual basis.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, criecx will notify affected individuals without undue delay, providing details of the nature of the breach, the data categories affected, and the steps criecx is taking to address it. criecx maintains a documented incident response plan for this purpose.

This Privacy Policy was last reviewed and updated on 1 January 2026. criecx reserves the right to amend this policy at any time. Material changes will be communicated to registered players via in-platform notification or email prior to taking effect. Continued use of the platform after the effective date of any amended policy constitutes acceptance of the revised terms.