krickex Privacy Policy

01 Data We Collect

krickex collects personal data from you directly when you register an account, make a deposit or withdrawal, contact our support team, participate in promotions, or interact with the platform in any way that requires identification. We also collect certain technical data automatically when you visit the krickex website, as described below.

Registration & Identity Data

When you create a krickex account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification purposes — krickex is an 18+ platform).
• Residential address in Bangladesh (street address, district, division, postal code).
• Email address registered to you personally.
• Mobile number registered to a Bangladesh network (Grameenphone, Banglalink, Robi, Teletalk, or Airtel BD).
• Username selected during registration.

KYC Verification Documents

As part of our Know Your Customer (KYC) compliance process, we collect copies of identity and address verification documents, which may include your Bangladesh National ID (NID) card, passport, driving licence, utility bills, bank statements, or confirmation screenshots from your mobile financial service (bKash, Nagad, Rocket, Upay) confirming account ownership.

Financial & Transaction Data

We collect records of all financial transactions conducted through your krickex account, including deposit amounts, withdrawal requests, payment method references (mobile wallet numbers, masked card details), transaction timestamps, and the currency (Bangladeshi Taka, BDT) of each transaction. Full payment card numbers are never stored on krickex servers.

Gaming Activity Data

We maintain a complete record of your gaming activity on the krickex platform, including games played, wager amounts, wins and losses, session durations, and bonus activity. This data is used for account management, responsible gaming monitoring, and regulatory compliance.

Technical & Device Data

When you access krickex, our servers automatically record certain technical information, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and referring URL.
• Session tokens and authentication identifiers.

Communications Data

If you contact krickex via live chat, email, or any other support channel, we retain a record of that communication, including the content of your messages, timestamps, and the identity of the support representative who assisted you. These records are used for quality assurance, dispute resolution, and compliance purposes.

02 Lawful Basis for Processing

krickex processes your personal data only where a lawful basis for that processing exists. The primary lawful bases we rely upon are as follows:

Where krickex relies on your consent as the lawful basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. You can manage your marketing preferences through your account settings or by contacting support@krickex.

03 How We Use Your Data

The personal data collected by krickex is used exclusively for the following purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected without first obtaining your explicit consent or having a separate lawful basis to do so.

Account Management

Your registration data is used to create, maintain, and manage your krickex account, verify your identity, process login requests, and communicate with you about your account status, security alerts, and platform updates.

Payment Processing

Financial data is used to process deposit and withdrawal requests via your nominated payment methods — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard — and to maintain accurate financial records for your account. We also use transaction data to identify and prevent fraudulent or suspicious financial activity.

Regulatory Compliance

krickex is required to verify the identity and age of all account holders, maintain records of all transactions, monitor for signs of problem gambling, and report suspicious activity where required by applicable law. Your personal data, including KYC documents and transaction history, is used to meet these obligations.

Responsible Gaming

Gaming activity data and session information are used by krickex's responsible gaming systems to monitor for indicators of problem gambling. Where such indicators are detected, we may contact you with responsible gaming resources, apply account restrictions, or refer you to specialist support services — all in accordance with our Responsible Gaming policy.

Platform Improvement & Analytics

Anonymised and aggregated technical and gaming data is used to analyse platform performance, identify and fix technical issues, improve game selection and user experience, and develop new features. This analysis is conducted on anonymised datasets wherever possible.

Marketing Communications

Where you have provided explicit consent, krickex may send you promotional emails, SMS notifications, and in-platform messages about new games, bonus offers, sports betting promotions, and the Black Diamond VIP Programme. You can opt out of marketing communications at any time through your account settings or by emailing support@krickex.

04 Data Sharing & Third Parties

krickex does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with external parties only in the following limited, controlled circumstances:

Payment Service Providers

To process deposits and withdrawals, krickex shares the minimum necessary financial and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and our card processing infrastructure for Visa and Mastercard transactions. All payment partners are contractually bound to process this data solely for the purpose of completing your transaction.

Game Technology Providers

To deliver casino and sports betting products, krickex integrates with game technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session tokens and device identifiers) to operate their game engines within the krickex platform. They do not receive your full personal profile.

Identity Verification Services

krickex may use third-party KYC and identity verification service providers to assist in document verification, age confirmation, and sanctions screening. These providers process your identity documents under strict contractual data processing agreements and are not permitted to retain your documents beyond the period required to complete the verification check.

Legal & Regulatory Authorities

krickex will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities when required to do so by applicable law, a valid court order, or as part of our anti-money laundering obligations. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that krickex undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered account holders before their data is transferred and becomes subject to a different privacy policy.

05 Cookies & Tracking Technologies

krickex uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, analyse site performance, and — where you have provided consent — deliver relevant promotional content. This section explains the types of cookies used and how you can manage them.

Types of Cookies Used

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the krickex platform to function. You can manage functional, analytics, and marketing cookies through your browser settings at any time. Most modern browsers — including Chrome, Firefox, Edge, and Safari — allow you to view, block, and delete cookies through the browser's privacy or settings menu. Please note that disabling functional cookies may affect your experience on the platform, including the loss of saved preferences.

Third-Party Tracking

Some of the cookies placed on krickex pages originate from third-party service providers, including analytics platforms and game technology providers. These third parties may use the data collected via their cookies in accordance with their own privacy policies. krickex does not have direct control over third-party cookies but requires all technology partners to comply with applicable data protection standards as a condition of their integration with our platform.

06 Data Retention & Deletion

krickex retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any active or potential disputes. The following retention periods apply as a general guide:

When the applicable retention period expires, personal data is either securely deleted from krickex systems or irreversibly anonymised so that it can no longer be associated with any individual. Secure deletion is performed in accordance with industry-standard data destruction practices.

Account Closure & Data Deletion Requests

If you close your krickex account and wish to request deletion of your personal data, you may do so by contacting support@krickex. Please be aware that certain data categories — specifically financial transaction records and KYC documents — must be retained for the periods stated above regardless of account closure, in order to meet our legal obligations. All other personal data associated with your account will be deleted or anonymised upon the expiry of the applicable retention period.

07 Your Privacy Rights

As a registered account holder or visitor to krickex, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised by submitting a written request to support@krickex with the subject line "Privacy Rights Request". We aim to acknowledge all requests within 5 business days and complete them within 14 calendar days.

Right of Access

You have the right to request a copy of all personal data krickex holds about you. We will provide this in a structured, commonly used, machine-readable format. This is known as a Subject Access Request (SAR). There is no charge for making an SAR unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account registration data, many fields can be updated directly through your account profile settings. For KYC document data, please contact support with the corrected information and supporting documentation.

Right to Erasure

In certain circumstances, you have the right to request that krickex delete your personal data — sometimes referred to as the "right to be forgotten". This right is subject to exceptions where processing is required for legal compliance, the establishment or defence of legal claims, or the exercise of a legal obligation that overrides your right to erasure. Where your data cannot be deleted in full due to these exceptions, we will delete what we lawfully can and explain the basis for retaining the remainder.

Right to Restrict Processing

You have the right to request that krickex restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and we are assessing whether our legitimate interests override your objection. During a restriction period, we may store your data but will not actively process it for the purpose you have objected to.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.

Right to Object to Marketing

You have an absolute right to object to your personal data being used for direct marketing purposes at any time. Upon receiving an objection, krickex will cease using your data for marketing immediately. You can exercise this right through your account settings or by contacting support@krickex.

08 Data Security Measures

krickex implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security programme is reviewed and updated on a continuous basis in response to the evolving threat landscape.

Technical Safeguards

• TLS 1.3 Encryption in Transit: All data transmitted between your browser or mobile device and krickex is encrypted using TLS 1.3 protocol. You can verify this by the padlock icon in your browser's address bar.
• AES-256 Encryption at Rest: Sensitive data stored on krickex servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 standard encryption.
• Two-Factor Authentication (2FA): All account holders are encouraged to enable SMS OTP-based 2FA. Staff accounts with access to personal data are required to use 2FA as a mandatory security control.
• Intrusion Detection: krickex operates continuous network monitoring and intrusion detection systems to identify and respond to suspicious access patterns or attempted breaches in real time.
• Regular Penetration Testing: Independent security assessments and penetration tests are conducted periodically to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only staff members whose role requires access to specific data categories are granted that access.
• All staff with access to personal data complete mandatory data protection training on an annual basis.
• Third-party service providers are assessed for security compliance before integration and are contractually required to maintain data security standards equivalent to those of krickex.
• A formal data breach response plan is maintained and tested regularly. In the event of a data breach affecting your personal data, krickex will notify you promptly in accordance with applicable notification obligations.

Your Role in Security

While krickex takes every reasonable measure to protect your data, the security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for using a strong, unique password for your krickex account, not sharing your credentials with anyone, and logging out of shared devices after each session. If you suspect unauthorised access to your account, contact support@krickex immediately so we can take protective action.