Privacy Policy — cricexch

1. Data We Collect

cricexch collects personal data only where there is a lawful basis to do so — namely, to fulfil a contract with you, to comply with a legal obligation, or where we have a legitimate interest in doing so. The categories of data we collect are described below.

1.1 Registration and Identity Data

When you create a cricexch account, we collect the following information to establish and manage your player profile:

• Full name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the minimum age requirement of 18 years.
• Email address — used for account communications, security alerts, and support correspondence.
• Mobile phone number — used for two-factor authentication and, if opted in, SMS notifications.
• Residential address — collected at the KYC verification stage, including district, city (e.g., Dhaka, Chittagong, Sylhet), and postcode.
• Username and password hash — we never store passwords in plain text; they are hashed using industry-standard cryptographic methods.

1.2 Identity Verification (KYC) Documents

To comply with our obligations related to responsible gaming and fraud prevention, we may request copies of:

• National Identity Card (NID) or passport.
• Proof of residential address (utility bill, bank statement dated within 90 days).
• Proof of payment method ownership (screenshot of bKash, Nagad, Rocket, or Upay account registered in your name).

1.3 Financial Transaction Data

When you make deposits or request withdrawals, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction reference numbers, amounts in BDT, timestamps, and processing status. We do not store full payment card numbers on our servers; card data is handled directly by our certified payment processors.

1.4 Gameplay and Betting Data

We record data about your activity on the platform, including bets placed, games played, wager amounts, win/loss outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access cricexch, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This data is used to maintain platform security, detect fraud, and optimise the user experience.

1.6 Communications Data

When you contact our support team — whether via live chat, email to support@cricexch, or WhatsApp — we retain records of those communications, including the content of messages and any attachments, for a period of no less than three years. These records are used to resolve disputes and improve our support quality.

2. How We Use Your Data

The personal data collected by cricexch is used for the following purposes, each supported by a lawful basis:

cricexch will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

3. Data Sharing & Disclosure

cricexch does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. However, we do share data with a limited set of trusted partners and service providers where necessary to operate the platform, as described below.

3.1 Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, we share the minimum necessary financial transaction data with our certified payment processing partners. These partners are contractually bound to process your data only for the purpose of completing your transaction and in accordance with applicable data protection standards.

3.2 Game Providers

Games on the cricexch platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game, your player ID, session token, and wager data are transmitted to the relevant game provider's servers to facilitate gameplay. Game providers are contractually required to handle this data securely and not to use it for independent marketing purposes.

3.3 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or in connection with legal proceedings. In such cases, we will disclose only the minimum information required to comply with the relevant obligation and will, where permitted, notify you of any such disclosure.

3.4 Business Transfers

In the event that cricexch undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and of any choices you may have regarding your data in advance of any transfer taking effect.

4. Cookies & Tracking Technologies

cricexch uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to maintain the functionality of the platform and to understand how players interact with our services. This section explains the types of cookies we use and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your authenticated state, and preserve your in-session preferences such as odds format and language. Essential cookies cannot be disabled without impairing the functionality of the platform.

4.2 Analytics Cookies

We use analytics tools to collect aggregated data about how players navigate the platform — which pages are most visited, where users drop off, and which game categories are most popular. This data is used to improve the platform's design and performance. Analytics cookies do not identify you personally.

4.3 Fraud Prevention Tokens

Certain persistent tokens are stored on your device to help our fraud detection systems identify unusual login patterns, detect account sharing, and flag suspicious deposit or withdrawal behaviour. These tokens are essential to the security of your account and cannot be disabled.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear cookies on exit, or browse in a private/incognito mode. Note that disabling essential cookies will prevent you from logging in to your cricexch account. For guidance on managing cookies in your specific browser, please consult your browser's help documentation.

5. Data Retention

cricexch retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data — retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with anti-money laundering (AML) record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial regulations.
• KYC verification documents — retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer support communications — retained for three (3) years from the date of the interaction.
• Gameplay and betting logs — retained for three (3) years from the date of each session or wager.
• Technical and device data (logs) — retained for twelve (12) months, after which logs are purged or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

6. Your Privacy Rights

As a user of the cricexch platform, you have a number of rights in relation to your personal data. These rights are set out below, along with guidance on how to exercise them.

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your contact email) can be made directly through your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that we are unable to delete financial transaction records before the legally mandated retention period has elapsed.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming purposes.

7. Data Security

cricexch implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and our servers.
• Password hashing using industry-standard cryptographic algorithms — your password is never stored in plain text.
• Two-factor authentication (2FA) available on all player accounts for an additional layer of login security.
• Access controls — internal access to personal data is restricted on a need-to-know basis; all staff with data access undergo training on data protection obligations.
• Regular security audits — our platform and infrastructure undergo periodic security reviews to identify and remediate vulnerabilities.
• Fraud detection systems — automated monitoring detects and flags unusual account activity, unusual deposit or withdrawal patterns, and suspected account takeover attempts in real time.

Despite these measures, no data transmission over the internet can be guaranteed to be completely secure. We encourage you to use a strong, unique password for your cricexch account, enable two-factor authentication, and contact our support team immediately if you suspect any unauthorised access to your account.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cricexch will take prompt steps to contain the breach, assess its scope, and notify affected users without undue delay where required to do so.

8. Policy Updates & Contact

8.1 Changes to This Policy

cricexch reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, we may notify you directly via email or an in-platform notification. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

Your continued use of the cricexch platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes to this policy, you should stop using the platform and contact our support team to arrange account closure.

8.2 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our data support team:

• Email: support@cricexch (plain text — not a clickable link)
• Live Chat: Available 24/7 via the cricexch platform
• WhatsApp: Available 08:00–24:00 BST (UTC+6)
• Response time: We aim to acknowledge all privacy-related queries within 24 hours and resolve them fully within 30 calendar days.