Privacy Policy — crickez

This Privacy Policy applies to all personal data processed by crickez in connection with the operation of its online gaming platform, accessible at crickez (the "Platform"). For the purposes of this policy, crickez acts as the data controller — meaning it determines the purposes and means by which your personal data is processed.

This policy applies to:

• All registered account holders on crickez, including members who access the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other regions of Bangladesh.
• Visitors who browse the Platform without creating an account.
• Any individual who contacts crickez. vip through any support channel, including email or live chat.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together govern your use of the Platform. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy.

crickez collects personal data through several channels: information you provide directly when registering or using the Platform, information generated automatically by your use of the Platform, and information received from third-party service providers where applicable. The categories of data we collect are described below.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, phone number, and residential address provided at the time of account creation.
• Identity verification (KYC) documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address, and proof of payment method ownership — collected as part of our mandatory Know Your Customer process before processing withdrawals.
• Financial data: Payment method details including mobile financial service account information (bKash, Nagad, Rocket, Upay), bank account details, and card information where applicable. Full card numbers are never stored directly on crickez servers.
• Support communications: The content of any messages, emails, or chat transcripts exchanged with the crickez support team.
• Preferences and settings: Responsible gaming limits, notification preferences, and account settings you configure within the Platform.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, betting history, session duration, clickstream data, and feature interactions within the Platform.
• Transaction data: Records of deposits, withdrawals, wagers placed, bonuses claimed, and game outcomes associated with your account.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply jurisdiction-specific restrictions and to detect unusual account activity.
• Cookie and tracking data: Information collected via cookies and similar tracking technologies as described in the Cookies section of this policy.

crickez processes your personal data only for clearly defined and legitimate purposes. The table below sets out the primary purposes for which your data is used, along with the legal basis for each processing activity.

crickez will never use your personal data for purposes incompatible with those listed above. Where we rely on legitimate interest as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest — see the Your Rights & Choices section for details.

If you have opted in to receive marketing communications from crickez, you may receive emails about promotions, bonuses, new game releases, and seasonal offers relevant to the Bangladesh market — such as Eid specials, Pohela Boishakh promotions, or BPL cricket season offers. You may withdraw your consent to receive marketing emails at any time by contacting support@crickez.

crickez does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each stated purpose.

• Game software providers: When you play a game on the Platform, technical session data (such as a session token and stake amount) is transmitted to the relevant game provider — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — to facilitate gameplay and settle game rounds. These providers act as data processors under contractual agreements with crickez and are not permitted to use your data for their own purposes.
• Payment processors: Financial transaction data is shared with the relevant mobile financial service or banking partner (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate the processing of deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Identity verification services: KYC documents may be processed by third-party identity verification service providers engaged by crickez to assist with age and identity checks. These providers are bound by strict data processing agreements and applicable data protection standards.
• Fraud prevention and security: Data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the Platform and to prevent money laundering, account takeover, and other malicious activity.
• Legal and regulatory compliance: crickez may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of crickez, its members, or the public.

crickez uses cookies and similar technologies (including local storage and session storage) to operate the Platform, remember your preferences, analyse usage patterns, and support fraud detection. A cookie is a small text file placed on your device by your browser when you visit the Platform.

The categories of cookies used on crickez are as follows:

Strictly necessary cookies are deployed without requiring your consent, as they are essential for the secure and functional operation of the Platform. All other cookie categories are activated only upon your acceptance. You may adjust your cookie preferences at any time through your account settings or by contacting support@crickez.

Please note that disabling functional or analytics cookies may affect your experience on the Platform. Disabling strictly necessary cookies will prevent you from logging in or using core features.

crickez retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods below reflect our standard data retention schedule.

When personal data reaches the end of its applicable retention period, crickez will securely delete or anonymise it so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

Where you request erasure of your personal data before the end of its standard retention period, crickez will assess whether any legal obligation prevents immediate deletion. If deletion is not possible at that time, we will restrict the processing of your data to the minimum necessary to meet our legal obligations and notify you of the outcome of your request within 30 days.

As a data subject, you hold the following rights in relation to your personal data held by crickez. These rights may be subject to certain limitations where crickez has a legal obligation to retain or process the relevant data.

• Right of Access: You have the right to request a copy of the personal data crickez holds about you, along with information about how it is being processed. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through the account settings panel; for other corrections, please contact support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations described in the Data Retention section above.
• Right to Restriction of Processing: You have the right to request that crickez restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified or while an objection to processing is being assessed.
• Right to Object: You have the right to object at any time to processing of your personal data where that processing is based on legitimate interest. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please submit your request in writing to support@crickez with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

crickez takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the crickez Platform is encrypted using industry-standard TLS 1.2 or higher. This applies to all pages including the login screen, deposit interface, and account settings.
• Data Encryption at Rest: Sensitive personal data stored on crickez's servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a defined operational requirement may access personally identifiable information, and all such access is logged and audited.
• Password Security: Account passwords are stored as salted cryptographic hashes. crickez never stores passwords in plain text and never transmits them in any communication to members.
• Fraud Monitoring: Automated systems continuously monitor account activity for indicators of unauthorised access, unusual transaction patterns, and other security anomalies. Suspicious activity triggers an immediate review process.
• Third-Party Security Assessments: crickez undergoes periodic security assessments conducted by independent security specialists to identify and remediate vulnerabilities.

While crickez implements robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your registered email account is secure. If you believe your crickez account has been compromised, contact support@crickez immediately.