Privacy Policy
of crickyx

crickyx collects personal data from you through a number of channels: directly from you when you register an account or interact with our platform; automatically when you use our website; and occasionally from third-party identity verification or payment processing partners. The categories of personal data we collect are described in full below.

Account Registration Data: When you create a crickyx account, we collect your full legal name, date of birth, email address, mobile phone number (used for OTP verification), and your chosen username. This data is required to create and administer your account and to verify that you meet the 18+ age eligibility requirement.

Identity Verification (KYC) Data: As part of our Know Your Customer obligations, we may collect copies of identity documents — such as your National Identity Card (NID), passport, or driver's licence — as well as proof of address documentation. We may also collect a selfie photograph for biometric matching purposes during the KYC process.

Financial and Payment Data: We collect the details of the BDT payment methods you use to deposit and withdraw funds — including bKash account numbers, Nagad wallet references, Rocket account identifiers, Upay references, bank account details, and card information (card type, last four digits, expiry date). We do not store full card numbers on our servers; card data is handled by our PCI-DSS compliant payment processor partners.

Transaction and Gaming Data: We record details of all financial transactions on your account (deposits, withdrawals, bonuses claimed) and all gaming activity (games played, bet amounts, winnings, session duration, cash-out events in crash games). This data is used for account administration, dispute resolution, fraud detection, and responsible gaming monitoring.

Technical and Device Data: We automatically collect certain technical data when you access crickyx.net, including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and pages visited on our site. This data is collected via server logs and cookies (see the Cookies section below).

Communications Data: We retain records of your communications with our customer support team — including live chat transcripts, emails, and support tickets — for quality assurance, training, and dispute resolution purposes.

Marketing Preferences: If you opt in to receive promotional communications from crickyx, we record that consent together with the date and channel through which it was given. You may withdraw marketing consent at any time.

Data We Collect About Others: crickyx does not knowingly collect or process personal data relating to individuals other than our registered account holders. Please do not provide us with personal data belonging to any third party unless you are authorised to do so and that individual has been informed of and has consented to the disclosure.

crickyx uses the personal data we collect for a range of purposes, each grounded in a lawful basis for processing. The table below summarises our primary data uses:

Marketing Communications: Where you have consented to receive marketing communications, crickyx may contact you by email or SMS to inform you about new game launches, promotional bonuses, seasonal offers (including Eid, Pohela Boishakh, and Victory Day promotions), and cricket betting specials — such as BPL and IPL tournament offers. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by emailing [email protected] with the subject line "Marketing — Unsubscribe".

Automated Decision-Making: crickyx uses automated systems to perform certain fraud risk assessments and responsible gaming checks. These automated processes may, in some circumstances, lead to automated decisions affecting your account — such as a temporary deposit block triggered by unusual transaction patterns. Where an automated decision has a significant impact on you, you have the right to request human review of that decision by contacting our support team.

crickyx does not sell or rent your personal data to any third party. We share your data externally only in the limited circumstances described below, and only with parties that are contractually bound to handle your data securely and in accordance with applicable data protection law.

KYC and Identity Verification Partners: We share identity document data with specialist KYC verification service providers to validate your age, identity, and payment method ownership as required by our anti-money laundering obligations. These partners process your data solely for verification purposes and are prohibited from using it for any other purpose.

Payment Processors: We share necessary financial data with payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay integrations, as well as card processing networks — to facilitate the processing of your deposits and withdrawals in BDT. These partners are independently regulated and maintain their own data security standards.

Game Technology Providers: crickyx integrates games supplied by third-party studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi. These providers may receive technical session data necessary to deliver their games — such as your account token and session identifier — but they do not receive your full personal profile or payment data.

Analytics and Security Platforms: We use reputable third-party analytics and cybersecurity tools to monitor platform performance, detect fraud, and improve user experience. These tools may process aggregated or pseudonymised technical data.

Legal and Regulatory Authorities: crickyx may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where mandated by applicable law — including in response to a valid court order, subpoena, or formal regulatory request. We will always seek to disclose the minimum amount of data necessary to satisfy such requests.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of crickyx, personal data held by crickyx may be transferred to the acquiring entity. In such circumstances, we will notify affected users via their registered email address prior to any transfer taking effect, and the acquiring party will be required to honour the commitments made in this Privacy Policy.

crickyx uses cookies and similar tracking technologies on our website to provide core platform functionality, maintain your logged-in session, understand how you use our site, and — where you have consented — to deliver personalised content and relevant promotional information.

What Are Cookies? Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the site operator. Cookies set by crickyx.net are first-party cookies; cookies set by our integrated third-party services are third-party cookies.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the operation of crickyx.net. They enable you to log in to your account, navigate between pages, and use core features like the cashier and game lobby. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use crickyx.net — such as which pages are visited most frequently and whether error messages are received. This data helps us improve the platform. These cookies require your consent.
• Functionality Cookies: These cookies allow crickyx.net to remember choices you have made — such as your preferred language setting or game lobby view — to provide a more personalised experience. These cookies require your consent.
• Targeting and Marketing Cookies: Where you have consented, these cookies track your browsing activity across sessions and may be used to show you relevant promotional content from crickyx. They are set only when you opt in to marketing communications.

Managing Your Cookie Preferences: You may manage or withdraw your consent to non-essential cookies at any time by adjusting your browser settings. Most modern browsers allow you to block or delete cookies through the browser's settings or privacy tools. Please note that disabling strictly necessary cookies will impair your ability to use crickyx.net. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

crickyx takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Security Measures:

• TLS/SSL Encryption: All data transmitted between your browser or device and crickyx.net is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• Data Encryption at Rest: Sensitive personal data — including KYC documents and payment method details — is encrypted at rest using AES-256 encryption on our secure servers.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. crickyx staff members are granted access only to the data categories necessary for their specific role. All staff access is logged and audited.
• Two-Factor Authentication: Internal administrative access to systems holding player data requires multi-factor authentication. We also encourage all crickyx players to enable two-factor authentication on their accounts for additional security.
• Penetration Testing and Vulnerability Scanning: Our infrastructure undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: We operate continuous network monitoring and intrusion detection systems to identify unusual access patterns or suspicious activity in real time.

Data Storage Location: Personal data collected from crickyx users is stored on secure servers. Where data is processed or stored outside Bangladesh, we ensure that appropriate safeguards are in place — including contractual obligations that require recipient parties to maintain equivalent data security standards.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, crickyx will notify affected users promptly via their registered email address. The notification will describe the nature of the breach, the data categories affected, the likely consequences, and the measures we are taking to address it.

As a user of crickyx, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights — [Type of Request]". We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data crickyx holds about you. Upon receiving a verified subject access request, we will provide a structured summary of your data in a commonly used electronic format within 30 days.
• Right to Rectification: If any personal data crickyx holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your email address or mobile number — directly from your account settings without needing to contact support.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that we may be unable to fully honour erasure requests where retention is required to comply with legal obligations — for example, AML record-keeping requirements that mandate retention for a specified number of years.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while you have lodged an objection to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes, in which case we will immediately cease using your data for that purpose.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right Not to be Subject to Automated Decision-Making: You have the right to request human review of any automated decision that significantly affects you. To submit such a request, please contact our support team with the details of the automated decision you wish to contest.

crickyx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The table below summarises our standard data retention periods by category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where anonymisation is applied, the resulting anonymised data (which is no longer personal data) may be retained indefinitely for statistical and analytical purposes.

In circumstances where a legal dispute, regulatory investigation, or law enforcement request is active or reasonably anticipated, crickyx may extend the retention period for relevant data categories beyond the standard periods stated above, for as long as the matter remains unresolved.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way crickyx processes your personal data, please contact our support team using the details below. We are committed to handling all privacy enquiries promptly, respectfully, and thoroughly.

Email: [email protected] (plain text only — not a clickable link)

Subject Line Guidance:

• For subject access requests: "Privacy Rights — Subject Access Request"
• For data deletion requests: "Privacy Rights — Erasure Request"
• For marketing opt-out: "Marketing — Unsubscribe"
• For general privacy questions: "Privacy Policy — Enquiry"
• For data breach concerns: "Security — Data Breach Report"

Response Times: Our support team operates 24/7 on Bangladesh Standard Time (UTC+6). We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days. If additional time is needed to process a complex request, we will notify you within the initial 30-day period and provide an expected completion date.

Policy Updates: This Privacy Policy was last updated on 1 January 2026. crickyx reserves the right to update this Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to active account holders via email to their registered address. The current version of this Privacy Policy is always available at crickyx.net/privacy-policy.

Governing Language: This Privacy Policy is written in English, which is the governing language of this document. Any translation provided for convenience does not form part of the binding policy text.