Cricx Privacy Policy — Our Commitment to Protecting Your Information

The Cricx Privacy Policy ("Policy") governs how your personal data is handled when you use our website, mobile app, and all digital services. By using the Cricx platform, you acknowledge that you have read and agreed to this Privacy Policy.

This Policy has been drafted in compliance with the GDPR (General Data Protection Regulation), local data protection laws, and the guidelines of international gaming licensing authorities. We believe transparency is the foundation of trust — so there is no hidden data collection and no undisclosed use of your information.

This Privacy Policy of Cricx Terms & Conditionsmust be read together with. Both documents combined form the legal basis of the relationship between you and cricx.

Cricx only collects information that is necessary to operate the platform, meet legal obligations, and provide you with a better experience. The categories of data we collect are outlined below:

Cricx collects your information through several methods. Stay informed about each one so you can stay in control of your data.

• At registration: When creating an account, you directly provide your name, email address, mobile number, and date of birth.
• During Transactions: Payment-related information is collected when processing deposits and withdrawals.
• During KYC verification: By uploading proof of identity and address.
• While Using the Platform: Browsing behavior, betting patterns, and preferences are collected through cookies and tracking technologies.
• When Contacting Customer Support: Conversations via live chat, email, or phone may be recorded.
• Via the Mobile App: Device ID, location data (if permission is granted), and push notification tokens.

Cricx uses collected data solely for specific, legitimate purposes. Each purpose is clearly outlined below — your information is never used for anything beyond what is stated.

• Account Management: To create, verify, and keep your account secure.
• Transaction Processing: To process deposits and withdrawals accurately.
• Legal obligation: Meeting AML (Anti-Money Laundering) and KYC regulatory requirements.
• Fraud Prevention: Detecting suspicious activity to keep your account secure.
• Personalized Experience: Showing offers and content tailored to your preferences.
• Customer Service Improvement: Analysing data to resolve your issues quickly.
• Technical improvements: To improve platform performance and security.
• Marketing Communications: Informing you about offers and promotions, with your consent.

Cricx never sells your personal data. However, in certain circumstances, limited information may be shared with trusted third parties. The reason for each case is explained below:

• Payment Providers: Only the information necessary to complete a transaction is shared with bKash, Nagad, Rocket, and our banking partners.
• Identity Verification Service: Documents are shared with trusted verification providers to complete the KYC process.
• Regulatory & law enforcement authorities: Data may be disclosed under legal obligation or by court order.
• Analytics services: Anonymous and aggregated data may be sent to analytics services to help improve the platform.
• Cloud infrastructure: Internationally recognised cloud service providers are used for secure data storage.

Cricx uses cookies on its website, which store small files in your browser. Cookies make your experience smoother and more personalised. cricx uses the following types of cookies:

You can disable cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of certain platform features.

Cricx uses industry-leading security technology to keep your data safe. Our multi-layered security framework is described below:

• 256-bit SSL/TLS Encryption: All data transfers are encrypted — no third party can intercept them.
• Two-Factor Authentication (2FA): An extra layer of security added to your login.
• Encrypted Database: All stored data is protected with AES-256 encryption.
• Access Control: Only authorized personnel can access specific data — based on role-based access controls.
• Real-time monitoring: An automated security monitoring system operates 24/7.
• Regular Security Audits: Regular penetration testing is carried out by third-party security specialists.

Cricx does not retain any data longer than necessary. Retention periods by data type are as follows:

Once the defined retention period expires, data is securely deleted or anonymized so that individuals can no longer be identified.

Every registered Cricx user has the following rights over their personal data. To exercise any of these rights, contact our support team directly.

Cricx strictly does not provide services to anyone under 18. Age is verified at registration, and age documentation is mandatory as part of the KYC process.

If we detect that a minor has registered an account, it will be immediately closed and all collected data will be securely deleted. If a parent or guardian suspects their child is using this platform, please contact us right away.

Cricx may update this Privacy Policy when necessary. If significant changes are made, we will notify you in the following ways:

• Email notification: A summary of the changes will be sent to your registered email.
• Platform notification: A notification will be displayed on your next login.
• Website Banner: Changes will be announced on the homepage.

Updated policies take effect 30 days after publication. If no objection is raised within this period, you will be considered to have accepted the new policy. Previous versions will be kept in our policy archive.

For any questions, complaints, or requests to exercise your rights regarding this Privacy Policy, please contact our dedicated Data Protection Team:

• Email: support@cricx.ws — responses are typically provided within 24 hours.
• Live Chat: Click the chat icon on the right side of the platform — available 24/7.
• Help Center: At the Help Center A detailed guide is available.