x crickex Privacy Policy

Information You Provide Directly

When you create an x crickex account or interact with our platform, you voluntarily provide us with the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and nationality as provided at registration or during KYC (Know Your Customer) verification.
• Contact Data: Email address, mobile phone number (used for OTP verification and account notifications), and residential address in Bangladesh or your declared jurisdiction.
• Identity Documents: Scanned copies or photographs of your Bangladesh National Identity Card (NID), passport, or driver's licence submitted during verification. Proof of address documents such as bKash, Nagad, or Rocket statements, utility bills, or bank statements from City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, or Sonali Bank.
• Financial Data: Mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number), card type (Visa/Mastercard), last four digits of payment cards, transaction amounts, and withdrawal instructions. We do not store full card numbers or mobile wallet PINs.
• Account Preferences: Language preferences, notification settings, responsible gaming limits you set (deposit limits, session time limits, self-exclusion elections), and VIP programme tier information.
• Communications Data: Records of your interactions with x crickex customer support via live chat, WhatsApp, or email at [email protected], including chat transcripts and email correspondence.

Information Collected Automatically

When you visit x-crickex.com or use our platform, we automatically collect technical and behavioural data through cookies, server logs, and analytics tools:

• Device and Technical Data: IP address, device type (mobile or desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed (including market selections, stake amounts, and outcomes), session duration, click patterns, search queries within the platform, and navigation paths.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data. Location data is used solely for jurisdiction compliance — to verify that you are not accessing the platform from a prohibited territory.
• Transaction History: A complete log of all deposits, withdrawals, bonus claims, bet settlements, and account balance changes associated with your account.

Information from Third Parties

In certain circumstances, x crickex receives personal data about you from trusted third-party sources. This includes identity verification results from KYC service providers, fraud screening data from anti-money-laundering (AML) compliance tools, and payment confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks. We use this data solely for the purposes described in this policy and do not combine it with data from unrelated sources.

Marketing Communications

If you have opted in to marketing communications during registration or through your account settings, x crickex may contact you via email, SMS, or WhatsApp to inform you about promotions, VIP tier upgrades, seasonal offers (such as Eid bonuses, Pohela Boishakh promotions, or BPL tournament specials), and new games or features on the platform. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of prior processing based on consent before withdrawal.

Automated Decision-Making

x crickex uses automated systems to detect unusual account activity, suspected bonus abuse, and potential match-fixing patterns. These systems may result in automatic account flags or temporary restrictions. Where an automated decision has a significant effect on your account, you have the right to request human review of that decision by contacting our support team at [email protected]. We will respond to such requests within 5 business days.

Service Providers

We share personal data with carefully selected third-party service providers who process it on our behalf and under our instructions. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank may receive bank transfer details where applicable.
• Identity Verification Providers: KYC and AML service providers receive your identity documents and personal details for the purpose of verifying your identity and screening for financial crime risk.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver their game content and ensure fair play certification. These providers do not receive your full name, contact details, or financial information.
• Customer Support Infrastructure: Our live chat and WhatsApp support tools are provided by third-party platforms. Support conversations may be stored on their secure servers for quality assurance and dispute resolution purposes.
• Analytics Providers: Aggregated, anonymised usage data is shared with analytics platforms to help us understand platform performance, identify technical issues, and improve user experience.

Legal and Regulatory Disclosure

x crickex may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or in response to a lawful request by a government authority in Bangladesh or any other relevant jurisdiction. We will notify you of such a disclosure where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of x crickex's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email or an in-platform notice prior to any such transfer, and you will be informed of any changes to this Privacy Policy that result from the transaction.

No Data Sales

x crickex does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing, advertising, or commercial purposes. Your data is your data — we treat it accordingly.

x crickex does not use third-party advertising cookies or tracking pixels designed to profile you across other websites for commercial advertising purposes. Our cookie usage is strictly limited to what is necessary for platform operation, security, and performance optimisation.

Active Account Data

While your x crickex account is active, we retain all personal data associated with your account, including registration details, transaction history, betting records, communication logs, and KYC documents. This data is necessary to deliver the platform's services and to comply with AML and financial record-keeping obligations.

Post-Closure Retention

Following the closure of your x crickex account — whether initiated by you or by x crickex — we retain certain categories of data for defined periods as required by applicable law and internal policy:

• Transaction and financial records: Retained for a minimum of 5 years from the date of the last transaction, in compliance with financial regulation and AML obligations applicable in Bangladesh.
• Identity verification documents: Retained for a minimum of 5 years from account closure to support law enforcement cooperation and KYC audit requirements.
• Customer support communications: Retained for 3 years from the date of the interaction to support dispute resolution and quality review.
• Betting and game history: Retained for 5 years from the date of the activity to support responsible gaming monitoring, fraud investigation, and dispute resolution.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal to demonstrate compliance with marketing regulations.

After the applicable retention period has expired, x crickex will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Self-Exclusion Records

If you request self-exclusion under our Responsible Gaming policy, your self-exclusion record will be retained for the full duration of the exclusion period and for a minimum of 5 years thereafter. This ensures that re-registration attempts are identified and declined appropriately.

Subject to applicable law and any overriding legal obligations x crickex may have, you are entitled to exercise the following rights in relation to your personal data:

Right of Access

You have the right to request a copy of the personal data x crickex holds about you. We will provide this within 30 days of receiving a verified request. The data will be provided in a commonly used electronic format (such as a structured PDF or CSV export).

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update information directly in your account settings. For KYC documents and date-of-birth corrections, please contact our support team with supporting evidence.

Right to Erasure ("Right to Be Forgotten")

You may request that x crickex delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to important limitations — x crickex is required to retain transaction records, KYC documents, and AML data for regulatory periods as described in the Data Retention section above. Requests for erasure that conflict with these legal obligations will be partially fulfilled, with only non-legally-required data deleted.

Right to Restrict Processing

You have the right to request that x crickex restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a formal objection is under review.

Right to Data Portability

Where we process your data based on your consent or contractual necessity, and where the processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format and to request that it be transmitted directly to another service provider where technically feasible.

Right to Object

You have the right to object to x crickex processing your data where that processing is based on legitimate interest, including profiling for personalisation. If you object, we will review whether our legitimate interest overrides your individual rights and will notify you of our determination. You may always object to marketing communications at any time via your account settings.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact our data protection team by emailing [email protected] with the subject line "Data Rights Request" and your registered account username. We will acknowledge your request within 3 business days and aim to fulfil it within 30 days. Complex or multiple simultaneous requests may take up to an additional 30 days, in which case we will notify you of the extended timeline.

Technical Safeguards

All data transmitted between your device and the x crickex platform is encrypted using 256-bit TLS (Transport Layer Security) encryption. This ensures that data in transit — including login credentials, payment details, and personal information — cannot be intercepted or read by unauthorised parties. Our servers are hosted in data centres with physical security controls, restricted access, and 24/7 monitoring.

Data at rest — including your account database records, KYC documents, and transaction logs — is encrypted using AES-256 encryption. Access to raw database records is restricted to a small number of authorised technical staff and is subject to multi-factor authentication and detailed access logs.

Payment Data Security

x crickex does not store full Visa or Mastercard card numbers, CVV codes, or mobile wallet PINs. Payment card details are tokenised by the payment processor at the point of capture. We store only the card type, expiry month and year, and last four digits for display purposes in your account. All payment transactions are processed through PCI-DSS compliant payment infrastructure.

Account Security Measures

x crickex provides two-factor authentication (2FA) via SMS OTP for all account holders. We strongly recommend enabling 2FA from your account security settings. Our platform automatically logs out inactive sessions after a period of inactivity to reduce the risk of unauthorised access on shared devices. Failed login attempts trigger progressive delays and temporary account locks after repeated failures.

Data Breach Response

In the event of a data breach that poses a risk to your personal data, x crickex will notify affected users via registered email address within a reasonable timeframe and will take immediate remedial action to contain and investigate the incident. x crickex maintains an internal incident response plan that is reviewed and tested regularly.

Staff Training and Access Controls

All x crickex staff who handle personal data undergo mandatory privacy and data security training. Access to personal data is granted on a strict need-to-know basis using role-based access controls. Staff are bound by confidentiality obligations that survive the termination of their employment or contract.

x crickex reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes — changes that affect the types of data we collect, the purposes for which we use it, or the rights available to you — we will notify registered users via the email address associated with their account and display a prominent notice on the platform for a minimum of 14 days prior to the change taking effect.

The "Last Updated" date at the top of this page will be revised each time the policy is updated. We encourage you to review this page periodically to stay informed about how x crickex protects your data. If you continue to use the platform after a revised policy has come into effect, you are deemed to have accepted the updated terms.

If you have questions about any change to this Privacy Policy, you may contact our support team at any time via live chat or by emailing [email protected]. We are committed to addressing privacy queries promptly and transparently.

Previous Versions

Previous versions of this Privacy Policy are available upon request by contacting our support team. This policy, effective 1 January 2026, supersedes all prior versions published under the x crickex brand.