criketx Privacy Policy

criketx collects personal data through a number of channels including account registration, ongoing platform use, customer support interactions, and payment processing. We collect only the data that is necessary for the legitimate purposes described in this policy. The categories of personal data we collect include the following:

1.1 Registration and Account Data

When you create an account on criketx, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, for the purpose of verifying that you meet the minimum age requirement of 18 years.
• Residential address in Bangladesh (including district, city, and postal code).
• Valid email address used for account communications and notifications.
• Mobile telephone number, used for one-time passcode (OTP) verification and account security.
• Username and hashed password credentials for account access.

1.2 Identity Verification (KYC) Documents

To comply with responsible gaming standards and anti-money-laundering obligations, criketx may request copies of the following documents:

• National Identity Card (NID), Passport, or Driver's Licence.
• Recent utility bill, bank statement, or official correspondence confirming your residential address.
• Proof of ownership of the payment method used to deposit funds (e.g., screenshot of bKash or Nagad wallet screen showing your registered mobile number).

1.3 Financial Transaction Data

When you make deposits or withdrawals on criketx, we collect transaction-specific data including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), transaction reference numbers, amounts, timestamps, and the currency denomination (BDT). We do not store full card numbers or mobile banking PINs — all sensitive payment credentials are handled directly by the relevant payment processor.

1.4 Betting and Gaming Activity Data

We maintain a record of all betting and gaming activity conducted through your criketx account, including:

• Sports bet selections, stake amounts, odds accepted, and settlement outcomes.
• Casino and live casino game sessions, including game titles, wager amounts, and results.
• Bonus claims, wagering progress, and promotional participation history.
• Account balance history, including credits, debits, and adjustments made by criketx staff.

1.5 Technical and Device Data

When you access criketx, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, language settings, referring URL, and session timestamps. This data is used for platform security, fraud prevention, and service improvement purposes.

1.6 Customer Support Communications

If you contact the criketx support team via email at support@criketx or through the platform's live chat, we retain records of those communications, including the content of messages, timestamps, and any documents or screenshots you choose to share. These records are kept to enable us to follow up on unresolved issues and to improve the quality of our support service.

criketx uses the personal data we collect for the following specific and legitimate purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent.

Where we rely on your consent as the legal basis for processing your personal data (for example, for sending promotional emails about new bonuses, BPL promotions, or seasonal offers), you may withdraw that consent at any time by updating your communication preferences in your account settings or by emailing support@criketx.

criketx does not sell, rent, or license your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

3.1 Payment Service Providers

In order to process your deposits and withdrawals, criketx shares relevant transaction data with our payment service partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners operates under their own published privacy policies and data protection obligations. criketx shares only the minimum data required to initiate and confirm each transaction.

3.2 Game Providers

criketx's casino and live casino products are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to facilitate your game session. They do not receive your full name, email address, or payment data unless explicitly required and consented to for a specific product feature.

3.3 Anti-Fraud and Security Services

criketx may share technical data (such as IP addresses, device fingerprints, and transaction patterns) with third-party fraud prevention and cybersecurity services for the purpose of detecting and preventing unauthorised account access, multi-accounting, and financial crime. This sharing is conducted under strict contractual data protection agreements.

3.4 Legal and Regulatory Disclosure

criketx may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction if we are legally required to do so or if we have a good-faith belief that such disclosure is necessary to prevent fraud, protect the rights and safety of our players, or comply with a valid legal process.

criketx uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, remember your preferences, and understand how players interact with our services. By continuing to use criketx after being presented with this policy, you consent to our use of cookies as described here.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, and ensure that your bets and game sessions are recorded accurately. The platform cannot operate without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences such as your chosen language, display settings, and recent game history. They are not essential but significantly improve your experience on criketx.
• Analytics Cookies: criketx uses anonymised analytics data to understand which pages and features are most popular, how long players spend on each section, and where users encounter difficulties. This data is used to improve the platform and is never linked back to individual accounts.
• Security Cookies: These are used to detect and prevent fraudulent activity, including bot traffic, credential stuffing, and suspicious session behaviour. They are part of our commitment to keeping your account secure.

4.2 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your criketx account and using core platform features. Instructions for managing cookies are available in your browser's help documentation. Disabling analytics or functional cookies will not affect your ability to use the platform but may reduce the quality of your experience.

criketx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and responsible gaming obligations. The following retention periods apply:

• Active account data (registration details, contact information, gaming history): Retained for the lifetime of the account and for a period of five (5) years following account closure.
• Financial transaction records (deposit and withdrawal history, payment method data): Retained for seven (7) years from the date of each transaction in accordance with financial record-keeping best practices.
• KYC and identity verification documents: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction in the relevant support thread.
• Technical and device data (logs): Retained for twelve (12) months from the date of collection for security monitoring purposes.
• Promotional and marketing consent records: Retained for as long as your consent remains active, plus three (3) years thereafter as evidence of that consent.

Upon expiry of the applicable retention period, criketx will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Anonymised, aggregated data (for example, aggregate betting volume statistics) may be retained indefinitely for platform analytics purposes, as it does not constitute personal data.

criketx implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and criketx is encrypted using TLS 1.3 with 256-bit key strength.
• Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or transmitted by criketx.
• Two-Factor Authentication (2FA): Players may enable OTP-based two-factor authentication via their registered mobile number for an additional layer of account security.
• Access Control: Internal access to personal data is restricted on a strict need-to-know basis. criketx staff are granted the minimum level of access necessary to perform their job functions.
• Regular Security Audits: criketx undergoes periodic security assessments and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection Systems: Automated monitoring systems are in place to detect unusual access patterns, brute-force login attempts, and other indicators of potential security incidents in real time.

In the event of a data security incident that is likely to result in a risk to your rights and interests, criketx will notify affected players without undue delay and will take all reasonable steps to contain, investigate, and remediate the incident. Notification will be sent to the email address registered on your criketx account.

As a player on criketx, you have a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our data protection team at support@criketx with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of all personal data that criketx holds about you. We will provide this information in a structured, commonly used, and machine-readable format within thirty (30) calendar days of receiving a verified request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update basic account information directly through your criketx account settings, or contact our support team for assistance with changes to sensitive data fields.

7.3 Right to Erasure

You may request that criketx delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that we may be required to retain certain data (such as financial records and KYC documents) for minimum statutory periods even following a valid erasure request.

7.4 Right to Restrict Processing

You have the right to request that criketx restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.

7.5 Right to Withdraw Consent

Where criketx processes your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent for marketing, update your notification preferences in your account settings or email support@criketx.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which criketx processes your personal data, please contact our support team using the details below. We treat all privacy-related enquiries with the highest priority and will respond within five (5) business days (Bangladesh Standard Time, UTC+6).

• Email: support@criketx (plain text — not a clickable link)
• Subject Line: Privacy Policy Enquiry
• Response Hours: 24 hours a day, 7 days a week

8.1 Policy Updates

criketx reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify all registered players by email to the address on file. The updated policy will be published at /privacy-policy with a revised effective date. Your continued use of criketx following notification of a material change constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how criketx is protecting your information. The version number and effective date at the top of this document indicate when the policy was last revised.