cricknx Privacy Policy
At cricknx, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains exactly what personal data we collect from players across Bangladesh, how we use it, who we share it with, and what rights you hold over your own information.
Data Minimisation
cricknx collects only the personal data that is strictly necessary for the purposes described in this policy. We do not collect data speculatively or in bulk. Every data field we request during registration or KYC has a defined, legitimate purpose aligned with operating a safe and compliant betting platform for Bangladeshi players.
No Sale of Personal Data
cricknx does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your information is used exclusively to operate, secure, and improve the cricknx platform, and to comply with applicable legal and financial compliance obligations in the markets where we operate.
You Are in Control
Registered cricknx users have the right to access, correct, export, restrict processing of, and request deletion of their personal data. These rights can be exercised at any time by contacting our support team. Specific rights and the process for exercising them are described fully in the Your Privacy Rights section of this policy.
1. Data We Collect
cricknx collects personal data through several distinct channels. The categories of data we collect, and the context in which we collect them, are set out below.
1.1 Registration Data. When you create a cricknx account, we collect your full legal name, date of birth, Bangladeshi mobile number, and a hashed version of your chosen password. This information is required to establish your account identity, verify that you meet the minimum age requirement of 18 years, and enable secure login. Without this data, we cannot create or maintain a registered account for you.
1.2 Identity Verification (KYC) Data. As part of our Know Your Customer programme, we may request copies of government-issued identity documents including your National Identity Card (NID), passport, or birth certificate. We may also request proof of address documents such as a utility bill or bank statement issued within the past three months. KYC documents are used solely to verify your identity, confirm your age, and satisfy our financial compliance obligations. They are stored securely and are not used for any other purpose.
1.3 Financial Data. When you make a deposit or request a withdrawal, we collect transaction data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction amount in BDT, the transaction date and time, and the reference number issued by your payment provider. cricknx does not store full card numbers, mobile wallet PINs, or other sensitive authentication credentials — these are handled directly and securely by your payment service provider.
1.4 Betting and Gaming Activity Data. We collect a full record of your activity on the cricknx platform, including the sports markets and casino games you interact with, the stake amounts placed, the outcomes of bets, and your session duration. This data is used to operate the platform, settle bets accurately, calculate and apply promotional entitlements, and detect and prevent fraudulent or prohibited betting activity.
1.5 Device and Technical Data. When you access the cricknx platform, our servers automatically collect certain technical information about your device and connection, including your IP address, device type and model, operating system and version, browser type and version, and session timestamps. This information is used to secure your account, detect suspicious login attempts, optimise platform performance across devices, and conduct aggregate statistical analysis of platform usage patterns.
1.6 Communications Data. If you contact cricknx support via email or live chat, we retain a record of the communication, including your name, contact details, the subject matter of the enquiry, and all messages exchanged. This record is used to resolve your query, train our support team, and maintain an audit trail of customer interactions in accordance with our operational and compliance obligations.
1.7 Responsible Gaming Data. If you use any of the responsible gaming tools available on the cricknx platform — including deposit limits, session timers, cooling-off periods, or self-exclusion — we record your elections and the dates on which they were applied. This data is used to enforce your responsible gaming settings and is treated with the highest level of sensitivity within our data management systems.
1.8 Promotional and Marketing Data. If you opt in to receiving promotional communications from cricknx, we record your marketing preferences and maintain a log of the communications sent to you. You may withdraw your consent to marketing communications at any time by contacting support at [email protected] or by adjusting your account notification preferences.
Summary of Data Categories
| Data Category | Examples | Primary Purpose | Collected At |
|---|---|---|---|
| Registration Data | Name, DOB, mobile number, password hash | Account creation, age verification | Registration |
| KYC / Identity Data | NID, passport, proof of address | Identity verification, compliance | Verification stage / withdrawal |
| Financial Data | Payment method, transaction amount, reference | Deposit/withdrawal processing | Each transaction |
| Activity Data | Bets placed, games played, stakes, outcomes | Platform operation, fraud detection | Continuous during sessions |
| Technical Data | IP address, device type, browser, OS | Security, performance optimisation | Each site visit |
| Communications Data | Support emails, chat transcripts | Query resolution, audit trail | Support interactions |
| Responsible Gaming Data | Limits set, self-exclusion dates | Enforcement of player protections | When tools are activated |
2. How We Use Your Data
cricknx processes your personal data only for clearly defined, legitimate purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected.
2.1 Operating the Platform. The primary use of your personal data is to operate and deliver the cricknx platform. This includes creating and managing your account, processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settling sports bets and casino game rounds, crediting promotional bonuses to your account, and maintaining an accurate record of your balance and activity history. Without this processing, we cannot provide the services you have registered to receive.
2.2 Identity Verification and Compliance. We use your KYC data and financial transaction data to verify your identity, confirm that you are aged 18 or above, and comply with our obligations under applicable financial integrity requirements. This includes screening transactions for indicators of money laundering, fraud, and match-fixing, and maintaining records required for financial audit purposes.
2.3 Account Security. We use your device and technical data to protect your account from unauthorised access. This includes detecting login attempts from unfamiliar IP addresses or devices, triggering OTP verification for high-risk sessions, and maintaining logs of account access for audit and investigation purposes.
2.4 Customer Support. Communications data collected during support interactions is used to investigate and resolve your queries, process account-related requests such as KYC document submissions and self-exclusion elections, and maintain a record of the support provided to you.
2.5 Platform Improvement. Aggregated, anonymised activity data and technical data are used to analyse usage patterns, identify performance issues, and improve the cricknx platform. Individual-level data is not used for this purpose; all improvement analysis is conducted on anonymised datasets.
2.6 Responsible Gaming Enforcement. Responsible gaming data is used exclusively to enforce the protective measures you have elected, including applying your chosen deposit limits, activating session timer alerts, enforcing cooling-off periods, and implementing self-exclusion where requested.
2.7 Marketing Communications. If you have opted in to receiving promotional communications, we use your contact details and marketing preferences to send you relevant offers, seasonal promotions (such as Eid, BPL, and T20 World Cup campaigns), and account notifications. You can withdraw your marketing consent at any time, and doing so will not affect your ability to use the platform or receive service-related communications.
Legal Bases for Processing
3. Data Sharing & Disclosure
cricknx does not sell your personal data. We share it only with carefully selected partners and authorities where strictly necessary, as described below.
3.1 Payment Service Providers. To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each provider handles this data under their own privacy and security frameworks. cricknx does not store sensitive payment authentication credentials; these are managed directly and securely by the provider.
3.2 Identity Verification Partners. Where we engage a third-party identity verification service to assist with KYC document checks, we share the relevant identity documents and personal details with that service solely for the purpose of verification. Third-party KYC partners are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
3.3 Game Studio Providers. When you play casino games or crash games on the cricknx platform — including titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — your session data (game rounds, stakes, outcomes) is processed by the relevant game studio provider to operate the game and generate certified random outcomes. Game studios receive session-level data only; they do not receive your full personal profile or financial account details.
3.4 Technology and Infrastructure Providers. cricknx uses technology service providers for hosting, platform infrastructure, content delivery, and analytics. These providers may process personal data on our behalf as data processors, under written agreements that restrict their use of your data to the specific services they provide to cricknx. We select infrastructure providers that maintain industry-standard security certifications.
3.5 Legal and Regulatory Authorities. cricknx will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, by court order, or by a valid formal request from a competent authority. We will notify you of any such disclosure where we are legally permitted to do so. cricknx cooperates fully with investigations relating to financial crime, underage gambling, and match-fixing.
3.6 Fraud Prevention and Industry Databases. Where cricknx has reasonable grounds to suspect fraudulent activity, we may share relevant account data with industry-wide fraud prevention databases and responsible gaming self-exclusion registers. This sharing is conducted on the basis of our legitimate interest in protecting the platform, other users, and the integrity of the betting industry, and is limited to the minimum data necessary for the fraud prevention purpose.
3.7 Business Transfers. In the event of a merger, acquisition, corporate restructuring, or sale of all or part of cricknx's business, personal data held by cricknx may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected users in advance and ensure that any acquiring entity is bound by privacy obligations no less protective than those set out in this policy.
3.8 No Third-Party Marketing. Under no circumstances does cricknx share, sell, rent, or license your personal data to third-party marketers, advertising platforms, or data brokers for their own commercial purposes. Any data shared with third parties is limited strictly to the categories and purposes described in this Section 3.
5. Data Security
Protecting your personal data against unauthorised access, disclosure, or loss is a core operational priority at cricknx. We apply layered technical and organisational security measures across our platform.
256-Bit SSL Encryption
All data transmitted between your device and the cricknx platform is protected by 256-bit SSL/TLS encryption. This ensures that your personal data, financial transaction data, and login credentials cannot be intercepted in transit. You can verify the SSL certificate is active by checking for the padlock icon in your browser address bar.
Password Security
Your cricknx account password is never stored in plain text. We apply strong one-way cryptographic hashing with salt to all passwords before storage. cricknx support staff cannot view your password under any circumstances and will never ask you to share it via email, chat, or phone. If you suspect your password has been compromised, reset it immediately via your account settings or contact support.
OTP Authentication
High-risk account actions — including large withdrawals, changes to registered contact details, and logins from new devices or unusual locations — trigger one-time password (OTP) verification sent to your registered Bangladeshi mobile number. This two-step verification ensures that only the account holder can authorise sensitive account changes even if login credentials are compromised.
Secure Data Storage
Personal data stored by cricknx is held on access-controlled servers with restricted internal access on a strict need-to-know basis. Sensitive data such as KYC identity documents and financial records are stored in encrypted form at rest. Physical and logical access to data storage systems is logged and regularly audited.
Continuous Monitoring
Our security operations monitor the cricknx platform continuously for indicators of unauthorised access, data exfiltration attempts, and unusual account activity patterns. Automated alerts are triggered by anomalous login behaviour, large rapid transaction sequences, and other risk signals, enabling our team to respond rapidly to potential security incidents.
Incident Response
In the event of a data security incident that may affect your personal data, cricknx will notify affected users promptly via their registered contact details, explaining the nature of the incident, the data affected, and the steps being taken to mitigate any harm. We maintain a documented incident response plan that is reviewed and tested regularly.
6. Data Retention
cricknx retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and financial compliance obligations.
6.1 Active Account Data. For as long as your cricknx account remains open and active, we retain all data associated with your account, including registration data, KYC documents, transaction history, betting and gaming activity records, and communications data. This data is required to operate your account, settle any outstanding bets, process any pending withdrawals, and comply with our ongoing compliance obligations.
6.2 Post-Closure Retention. Following the closure of your cricknx account — whether voluntarily, as a result of a breach of the Terms & Conditions, or via self-exclusion — we are required to retain certain categories of personal data for a defined period after closure. Financial transaction records and KYC identity documents are retained for a period of at least five years following account closure to satisfy financial record-keeping obligations. Communications data relating to complaints or disputes is retained for a period of three years from the date of resolution.
6.3 Anonymisation. Where data is no longer required for any active or legally mandated purpose, and retention of identifiable data is not required by law, cricknx anonymises the data rather than deleting it. Anonymised data — from which all direct and indirect identifiers have been removed — may be retained indefinitely for aggregate statistical and platform improvement purposes and is no longer considered personal data under applicable privacy standards.
6.4 Deletion Requests. If you request the deletion of your personal data and there is no overriding legal obligation requiring us to retain it, cricknx will action your deletion request within 30 days of receipt. Where deletion cannot be fulfilled in full due to legal retention obligations, we will inform you of the specific categories of data that must be retained and the reason for retention, and will isolate the remaining data from active processing systems pending the expiry of the retention period.
6.5 Marketing Data. If you withdraw your consent to marketing communications, your marketing preferences will be updated immediately and you will not receive further promotional messages from cricknx. We will retain a record of your consent withdrawal for audit purposes. Your marketing preference data is not subject to extended post-closure retention and will be deleted within 90 days of your consent withdrawal or account closure, whichever is earlier.
Retention Periods at a Glance
7. Your Privacy Rights
As a cricknx user, you hold specific rights over your personal data. These rights can be exercised at any time by contacting our support team at [email protected].
Right of Access
You have the right to request a copy of all personal data that cricknx holds about you. We will provide this in a structured, readable format within 30 days of receiving your verified request. There is no charge for a first access request in any 12-month period.
Right of Rectification
If any personal data that cricknx holds about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain data directly in your account settings, or contact support for changes to data that requires verification, such as your registered name or date of birth.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. This right is subject to legal retention obligations as described in Section 6.
Right to Restrict Processing
You have the right to request that cricknx restricts processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
Right to Data Portability
Where we process your data on the basis of your consent or a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another service provider where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes, including any profiling for marketing. We will cease marketing processing immediately upon receipt of your objection.
How to Exercise Your Rights
To exercise any of the rights described above, submit a written request to our support team at [email protected]. Your request should include your full registered name, your registered Bangladeshi mobile number, a description of the right you wish to exercise, and — for access or portability requests — the specific categories of data you are requesting. We may ask you to verify your identity before processing sensitive data requests. We will respond to all verified requests within 30 days. If your request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
8. Policy Updates & Contact
cricknx reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, and applicable legal requirements.
8.1 Policy Amendments. cricknx reserves the right to amend this Privacy Policy at any time. When we make material changes — changes that affect how we collect, use, or share your personal data in a way that is meaningfully different from what is described in the current policy — we will notify you via your registered contact details prior to the changes taking effect. For minor clarifications and non-material updates (such as correcting typographical errors or clarifying existing practices without changing them), we will update the policy without prior individual notification.
8.2 Effective Date. The current version of this Privacy Policy is effective from 1 January 2026. The effective date at the top of this policy will be updated each time a new version is published. We encourage you to review this policy periodically, particularly before making significant deposits or submitting KYC documents, to ensure you are aware of any changes to our data practices.
8.3 Continued Use. Your continued use of the cricknx platform following the notification of a material policy change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request closure of your account by contacting [email protected]. Account closure requests submitted in response to a policy change will be processed on a priority basis.
8.4 Contacting cricknx About Privacy. All privacy-related queries, data subject rights requests, and concerns about how cricknx handles your personal data should be directed to our support team at [email protected]. We are committed to handling all privacy queries with care and transparency. If you submit a query and are not satisfied with our response, you have the right to escalate your concern to an appropriate authority in the jurisdiction where you are located.
8.5 Children and Minors. The cricknx platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that an account has been registered by a person under the age of 18, we will immediately close the account, forfeit any account balance, and securely delete all associated personal data. If you believe a minor has registered an account on cricknx, please notify us immediately at [email protected] so that we can take prompt action.
Privacy Commitments Summary
- We collect only the data we genuinely need to operate and secure the platform
- We never sell, rent, or trade your personal data to third-party marketers
- All data in transit is protected by 256-bit SSL/TLS encryption
- Passwords are stored as one-way cryptographic hashes — never in plain text
- You can access, correct, export, or delete your data at any time
- Marketing communications are strictly opt-in and can be withdrawn at any time
- The platform is for adults aged 18 and above — we do not process data from minors
- All privacy queries are handled by our support team within 30 days
Questions About Your Privacy?
Our support team is available around the clock to help with any data-related queries. You can also explore our FAQ for quick answers, review our Responsible Gaming commitment, or head straight to the cricknx platform.
18+ only. Please gamble responsibly. This Privacy Policy is effective from 1 January 2026.