criksx Privacy Policy — How We Protect & Handle Your Personal Data
At criksx, protecting the personal data of our players is a fundamental responsibility. This Privacy Policy explains in plain English precisely what information we collect when you use the criksx platform, why we collect it, how it is stored and secured, who it may be shared with, and the rights you hold over your own data. We are committed to full transparency on every one of these points.
This Privacy Policy applies to all personal data processed by criksx in connection with your use of https://criksx.net and all associated services, including casino games, sports betting markets, the BDT wallet, and customer support. By registering a criksx account and using our platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact [email protected] to request account closure.
SSL Encrypted Platform
Every connection to criksx is protected by 256-bit SSL/TLS encryption. All data transmitted between your device and our servers — including login credentials, payment details, and personal information — is fully encrypted in transit at all times.
Minimal Data Collection
criksx collects only the personal data that is strictly necessary to provide you with a safe, compliant, and personalised gaming experience. We do not collect unnecessary data, and we do not sell your personal information to third-party marketers under any circumstances.
No Data Selling
Your personal data is never sold, rented, or traded to third-party advertisers, data brokers, or marketing companies. Data shared with our service partners is strictly limited to what is needed to operate the criksx platform and process your transactions securely.
KYC Identity Protection
KYC documents — including National ID Cards, passports, and payment method screenshots — are stored in encrypted form with access restricted to authorised compliance personnel only. KYC data is never used for marketing and is never shared beyond the scope of our legal obligations.
Full Control Over Your Data
You have the right to access, correct, export, and request deletion of the personal data criksx holds about you. These rights can be exercised at any time by contacting our support team at [email protected]. We process all data requests within 15 business days of receipt.
Responsible Gaming Data Use
Behavioural data — including your session history, deposit patterns, and playing frequency — may be used by criksx's responsible gaming systems to identify and support players who may be experiencing gambling-related difficulties. This use is always in your interest, never for marketing profiling.
Information We Collect
criksx collects personal data through several channels: directly from you when you register an account or contact our support team; automatically when you use the platform; and from third-party service providers where necessary for payment processing, identity verification, and fraud prevention. The categories of information we collect are set out in detail below.
1.1 Registration Information
When you create a criksx account, we collect the personal information you provide during the registration process. This includes your full name, date of birth, mobile phone number, and the password you set for your account. We require this information to create and administer your account, verify that you meet our minimum age requirement of 18 years, and communicate with you regarding your account. Providing accurate registration information is a condition of using criksx.
1.2 KYC Verification Documents
To comply with our age verification, anti-money laundering (AML), and Know Your Customer (KYC) obligations, we may request copies of identity documents when you reach certain withdrawal thresholds or when requested by our compliance team. Acceptable documents include a valid Bangladesh National ID Card (NID), passport, driver's licence, or birth certificate. We may also request proof of your payment method ownership, such as a screenshot of your bKash or Nagad account showing your registered mobile number. All KYC documents are stored in encrypted form and handled exclusively by authorised compliance personnel.
1.3 Financial & Transaction Data
When you make deposits or request withdrawals through the criksx BDT Wallet, we collect and retain transaction records. These records include the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction, and the transaction reference number provided by the payment processor. We do not store full card numbers. Payment method credentials are processed by our secure payment partners and are never stored on criksx servers in unencrypted form.
1.4 Gaming & Betting Activity Data
We collect records of all gaming and betting activity conducted through your criksx account. This includes the games played, bet amounts, bet outcomes, win/loss records, session durations, bonus usage history, and wagering progress. This data is used to administer your account, calculate payouts correctly, enforce responsible gaming limits, investigate disputes, and — in aggregate and anonymised form — to improve the platform and its game offerings.
1.5 Device & Technical Data
When you access criksx via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, and the pages and features you interact with during your session. This data is used for security monitoring, fraud detection, platform optimisation, and to ensure compliance with geographic access restrictions.
1.6 Customer Support Communications
When you contact our English-language support team via email at [email protected] or through our live chat platform, we retain records of those communications. This includes the content of your messages, the date and time of communication, and any documents or screenshots you share during the support interaction. These records are used to resolve your query, train our support team, and maintain an accurate history of account-related matters.
| Category | Examples |
|---|---|
| Identity | Name, date of birth, NID / passport |
| Contact | Mobile number, email address |
| Financial | Transaction history, payment method type |
| Gaming | Bets placed, game sessions, win/loss records |
| Technical | IP address, browser, device type |
| Support | Chat and email communications |
Do not share sensitive financial credentials — such as your full bKash PIN, Nagad PIN, or bank account passwords — with criksx. Our support team will never ask for these details. If you receive a request for payment PINs claiming to be from criksx, treat it as a phishing attempt and report it immediately to [email protected].
criksx does not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has registered on criksx, please contact [email protected] immediately. Upon confirmation, we will permanently close the account and securely delete all associated personal data.
How We Use Your Data
criksx processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy. The primary purposes for which we process your data are set out below, along with the legal basis for each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Name, mobile number, date of birth, password | Contractual necessity — required to provide the criksx service |
| Age verification (18+ compliance) | Date of birth, KYC identity documents | Legal obligation — mandatory age checks for gambling platforms |
| Processing deposits and withdrawals | Payment method details, transaction records, BDT wallet balance | Contractual necessity — required to operate the BDT Wallet |
| Anti-money laundering (AML) checks | Identity documents, transaction history, source-of-funds documentation | Legal obligation — AML compliance best practices |
| Fraud detection and account security | IP address, device data, login history, transaction patterns | Legitimate interest — protecting players and platform integrity |
| Responsible gaming monitoring | Session duration, betting frequency, deposit patterns, loss history | Legitimate interest — player welfare and harm prevention |
| Customer support and dispute resolution | Support communications, account history, transaction records | Contractual necessity and legitimate interest |
| Platform analytics and improvement | Aggregated, anonymised usage data, device data | Legitimate interest — improving the criksx service |
| Service communications (account alerts) | Mobile number, account activity data | Contractual necessity — notifying you of account-relevant events |
| Promotional communications (opt-in only) | Mobile number, gaming preferences | Consent — only where you have explicitly opted in to marketing |
criksx will only send you promotional messages — including bonus offers, seasonal promotions tied to BPL, Eid, or Pohela Boishakh, and new game announcements — if you have explicitly opted in to receive them during registration or subsequently via your account settings. You may withdraw your marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the criksx platform.
Data Sharing & Third Parties
criksx does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific, limited circumstances described in this section, and only to the minimum extent necessary for each purpose.
3.1 Payment Processing Partners
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, criksx shares the transaction data and payment method identifiers necessary to execute each transaction with the respective payment service provider. These providers operate under their own privacy policies and security standards. criksx selects payment partners who maintain standards of data security consistent with our own.
3.2 Game Providers
To deliver casino games, live casino tables, slots, and crash game products, criksx integrates with licensed international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi. These providers may receive limited technical data — such as a session token and your account tier — to load and operate their games within the criksx platform. Game providers do not receive your full personal profile, payment details, or KYC documents.
3.3 Identity Verification Partners
To conduct KYC and age verification, criksx may use the services of specialist identity verification providers. Where this applies, KYC documents and identity data are shared with the verification provider under strict data processing agreements that prohibit the provider from using that data for any purpose other than the verification service requested by criksx.
3.4 Legal & Regulatory Disclosures
criksx may disclose personal data to law enforcement authorities, government bodies, or regulatory agencies where required to do so by applicable law, a court order, or a lawful regulatory request. In all such cases, criksx will disclose only the minimum data required to satisfy the legal obligation and will notify the affected account holder where legally permitted to do so.
3.5 Business Transfers
In the event that criksx undergoes a business reorganisation, merger, acquisition, or asset sale, personal data held by criksx may be transferred as part of that transaction. In such circumstances, criksx will ensure that any successor entity is bound by privacy obligations that are no less protective than those set out in this Privacy Policy. Affected players will be notified of any material change in the data controller's identity.
3.6 No Third-Party Advertising Sharing
criksx does not share personal data — including names, mobile numbers, gaming histories, or demographic data — with third-party advertisers, social media advertising platforms, or data brokers for marketing or retargeting purposes. Any analytics tools used by criksx operate on aggregated, anonymised data only and are not granted access to individual player records.
- Payment processors (bKash, Nagad, Rocket, Upay, banks, Visa/Mastercard)
- Game studios (session tokens only — no full profile)
- Identity verification providers (KYC documents only)
- Law enforcement or regulators (when legally required)
- Third-party advertisers or data brokers
- Social media platforms for retargeting
- Other gambling operators or affiliates
- Any party without a valid legal or contractual basis
All third-party service providers who process personal data on behalf of criksx are bound by data processing agreements. These agreements require service providers to process data only on criksx's documented instructions, implement appropriate technical and organisational security measures, and immediately notify criksx of any data security incident affecting criksx player data.
Data Security & Storage
5.1 Technical Security Measures
criksx implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. Technical security measures in place include 256-bit SSL/TLS encryption for all data in transit; encryption at rest for sensitive personal data including KYC documents and financial records; firewalls and intrusion detection systems on all servers hosting criksx data; rate limiting and automated blocking of suspicious login attempts; and regular vulnerability assessments of platform infrastructure.
5.2 Organisational Security Measures
Access to personal data within criksx's systems is restricted on a strict need-to-know basis. Only authorised personnel — specifically those whose role requires access to complete KYC documents and sensitive player records — are granted the relevant access permissions. All personnel with access to personal data are bound by confidentiality obligations. Access permissions are reviewed regularly and revoked immediately upon any change in employment status.
5.3 Data Breach Response
In the event of a data security incident that poses a risk to the personal data of our players, criksx will take immediate steps to contain and assess the incident. Affected players will be notified without undue delay where the incident is likely to result in a high risk to their rights and interests. Notification will be provided via the mobile number or email address registered to the affected account and will include a description of the nature of the incident, the categories of data affected, the likely consequences, and the measures taken or proposed to address the incident.
5.4 Where Your Data Is Stored
criksx stores player data on secure servers. While criksx serves the Bangladesh market, some technical processing operations — including game delivery by international game studios and payment processing — may involve data being processed by systems located outside Bangladesh. Where data is transferred internationally, criksx ensures that appropriate safeguards are in place, including contractual protections requiring the receiving party to protect the data to a standard consistent with this Privacy Policy.
- 256-bit SSL/TLS encryption on all connections
- Encryption at rest for KYC documents
- Intrusion detection and firewall protection
- Automated suspicious login blocking
- Need-to-know access controls for staff
- Regular security vulnerability assessments
- Prompt breach notification to affected players
While criksx implements robust technical security measures, your own account security practices are equally important. Use a strong, unique password for your criksx account. Never share your login credentials with anyone. Log out of your account when using shared or public devices. If you suspect any unauthorised access to your criksx account, contact [email protected] immediately — we respond to security alerts within one hour.
If you discover a potential security vulnerability on the criksx platform, or if you believe your account or personal data has been compromised in any way, please contact our security team immediately via [email protected] with the subject line "Security Report". All security disclosures are treated as the highest priority.
Data Retention Periods
criksx retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Once data is no longer required, it is securely deleted or anonymised. The standard retention periods applied to each category of data are set out in the table below.
| Data Category | Standard Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | 5 years after account closure | AML compliance obligations and dispute resolution |
| KYC identity documents | 5 years after account closure | Legal obligation — anti-money laundering record-keeping requirements |
| Financial transaction records | 5 years after each transaction | Financial record-keeping obligations and dispute resolution |
| Gaming and betting activity logs | 3 years after account closure | Responsible gaming monitoring, dispute resolution, and platform analytics |
| Customer support communications | 3 years after each interaction | Dispute resolution, quality assurance, and compliance audit trail |
| Device and technical log data | 12 months from collection | Security monitoring, fraud detection, and platform diagnostics |
| Marketing consent records | Duration of consent plus 3 years | Evidence of consent basis for marketing communications |
| Self-exclusion records | Minimum 7 years after exclusion period ends | Responsible gaming obligation — prevents re-registration during exclusion |
Where data is not subject to a mandatory legal retention requirement, you may request early deletion of your personal data by contacting [email protected]. criksx will assess each deletion request individually and respond within 15 business days. Please note that deletion requests cannot be honoured where data must be retained to comply with AML obligations, to resolve an open dispute, or where an account is subject to an active investigation. In such cases, we will explain the basis for retaining the data and provide an estimated timeline for its deletion.
Your Privacy Rights
As a criksx player, you hold a number of rights in respect of the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number and account username so we can locate your records. We will acknowledge all rights requests within 3 business days and complete them within 15 business days of receipt.
To protect the privacy of all our players, criksx will verify your identity before processing any rights request. We will ask you to confirm your registered mobile number and may request additional verification — such as confirming a recent transaction amount or providing the last four digits of your NID number — before releasing, amending, or deleting any personal data. This verification step is a security measure taken in your interest to prevent unauthorised access to your data by a third party.
Contact & Data Enquiries
8.1 How to Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way criksx handles your personal data, please contact our support team in the first instance. All privacy-related correspondence should be sent to [email protected] with the subject line clearly indicating the nature of your query — for example, "Privacy Rights Request", "Data Deletion Request", "Cookie Query", or "Security Concern". Our English-language team is available 24/7 and we aim to acknowledge all privacy-related correspondence within 3 business days.
8.2 Changes to This Privacy Policy
criksx may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or developments in applicable law. When material changes are made to this policy, we will update the "Last Reviewed" date at the top of this page and, where the changes significantly affect how we use your data, we will notify active account holders directly via their registered contact details. We encourage you to review this Privacy Policy periodically. The current version is always available at https://criksx.net/privacy-policy.
8.3 Policy Scope & Linked Pages
This Privacy Policy applies exclusively to personal data processed by criksx in connection with your use of https://criksx.net and its associated services. It does not apply to third-party websites that may be referenced in our content. Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe operate their own independent privacy policies governing any data they collect in the delivery of their games. We recommend reviewing those policies separately if you have questions about how individual game providers handle data.
8.4 Relationship to Other Policies
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together form the full set of agreements governing your use of the criksx platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall prevail in respect of data protection matters.
For all privacy and data protection enquiries:
[email protected]
Subject: Privacy Rights Request
Response time: Within 3 business days
Support hours: 24/7 including Bangladesh public holidays
For a complete understanding of how your relationship with criksx is governed, we recommend reading all of the following documents, each of which is available in full on the criksx website:
- Terms & Conditions — rules of platform use
- Responsible Gaming — harm prevention tools
- FAQ — common questions answered
This Privacy Policy is provided for informational purposes and constitutes criksx's disclosure of its data processing practices. It does not constitute legal advice. If you require independent legal advice about your data protection rights, you should consult a qualified legal professional. criksx accepts no liability for any action taken or not taken based solely on reading this Privacy Policy without independent legal review.
Have Questions About Your criksx Data?
Our English-language support team is available 24/7 to handle privacy requests, data queries, and account matters. You can also explore our other legal pages or return to the platform.
18+ Only Play Responsibly · SSL Secured · BDT Wallet · 24/7 English Support