criktx Privacy
Policy

1. Information We Collect

criktx collects personal information from you in the course of operating the platform — from the moment you register an account through to your ongoing use of betting, casino, and payment services. The categories of personal information we collect are set out below.

1.1 Registration Information

When you create a criktx account, we collect the following information that you provide directly: your full legal name, date of birth, Bangladesh National Identity Card (NID) number or passport number, current residential address in Bangladesh, email address, mobile phone number registered in Bangladesh, and the username and password you choose for your account.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) verification process — which is a legal requirement for operating a real-money betting platform — criktx may collect copies of your Bangladesh NID, passport, driving licence, utility bills, bank statements, and photographic selfie images. These documents are used solely for the purpose of verifying your identity and age, and confirming that you meet the eligibility criteria to use the criktx platform.

1.3 Financial Transaction Data

When you make deposits or request withdrawals, criktx records transaction amounts in BDT, transaction timestamps, payment method type (e.g., bKash, Nagad, Rocket, Visa, Mastercard), transaction reference numbers, and the mobile number or bank account associated with your payment method. We do not store your full card number, CVV, or mobile wallet PIN at any point during transaction processing.

1.4 Betting and Gaming Activity

criktx automatically records all betting and gaming activity associated with your account, including bet placement times, stake amounts, odds accepted, game titles played, session durations, and settlement outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

1.5 Technical and Device Data

When you access the criktx platform, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, pages visited within the criktx platform, and session timestamps. This information is used for security monitoring, fraud detection, and platform optimisation.

1.6 Communications Data

If you contact criktx via email ([email protected]) or through any other criktx communication channel, we retain records of your correspondence including the content of your messages, your contact details, and the date and time of your enquiry. This allows us to respond to your query accurately and to maintain a record of support interactions.

2. How We Use Your Data

criktx uses the personal information we collect for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. The primary purposes for which we process your personal data are outlined below.

2.1 Marketing Communications

criktx will only send you promotional emails, bonus offers, or betting tips if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected]. Unsubscribing from marketing messages does not affect your ability to receive transactional account notifications (e.g., deposit confirmations, withdrawal updates).

2.2 Automated Decision-Making

criktx employs automated systems to detect fraud, identify unusual account activity, and flag potential responsible gaming concerns. In certain cases, these automated systems may result in an account being temporarily suspended pending manual review. If your account is affected by an automated decision and you wish to challenge the outcome, please contact [email protected] to request a manual review by a member of our compliance team.

3. Data Sharing & Disclosure

criktx does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, criktx shares the minimum necessary financial transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, and Upay mobile wallet services, as well as card processing networks (Visa, Mastercard) and partner banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners receive only the data required to execute and verify the specific transaction and are contractually prohibited from using your data for any other purpose.

3.2 Game Software Providers

When you play casino games or slots on the criktx platform, a session token and anonymised player identifier may be transmitted to the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to enable the game to function correctly. Your full name, NID number, and financial details are not shared with game providers.

3.3 Legal and Regulatory Disclosure

criktx may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction. This includes disclosures made in connection with anti-money-laundering (AML) investigations, fraud investigations, or other criminal proceedings. We will notify you of such disclosures where it is legally permissible to do so.

3.4 Business Transfers

In the event that criktx undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, criktx will ensure that appropriate contractual safeguards are in place to protect your privacy rights, and we will notify affected players of any material change to the data controller.

3.5 No Sale of Data

criktx does not sell, rent, license, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. Any third party that receives your data from criktx does so solely to provide services on our behalf and is bound by strict data processing agreements.

4. Cookies & Tracking

The criktx platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use the site so we can continue improving it.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to remember information about your visit — for example, your preferred language settings or whether you are logged in to your account. Cookies cannot execute programmes or transmit viruses, and they cannot read data from other cookies or files on your device.

4.2 Types of Cookies Used by criktx

• Essential cookies: Required for the criktx platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as display settings and language selection to provide a more personalised experience.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the criktx platform — such as which pages are visited most often and where players encounter errors. This data helps us improve the platform experience.
• Responsible gaming cookies: Store session timing information used to display session duration reminders and enforce time-out periods you have voluntarily set on your account.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, and to be notified when a cookie is being set. Please note that disabling essential cookies will prevent you from logging in to your criktx account and may cause other core functions of the platform to fail. Disabling analytics cookies will not affect your ability to use the platform but will mean that your usage patterns are not included in our platform improvement data.

4.4 No Third-Party Advertising Cookies

criktx does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on other websites. The criktx platform does not participate in advertising networks that track your browsing activity across external sites.

5. Data Retention

criktx retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold.

• Account registration data: Retained for the lifetime of your criktx account, plus a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the date of last transaction, as required by applicable financial crime regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, for compliance with AML obligations and financial audit requirements.
• Betting and gaming history: Retained for a minimum of three (3) years following the date of each transaction, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for three (3) years from the date of the last correspondence related to a given support matter.
• Technical and device data (server logs): Retained for twelve (12) months from the date of collection, unless a specific security incident requires retention for a longer period.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus five (5) years after its expiry, to prevent re-registration in breach of the exclusion arrangement.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, as evidence of your preference.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to any individual. Anonymised aggregated data (e.g., platform usage statistics) may be retained indefinitely for analytical purposes.

6. Data Security

criktx implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, we apply the following protective measures as standard across the criktx platform.

6.1 Encryption

All data transmitted between your device and the criktx platform is encrypted using Transport Layer Security (TLS) protocols. Personal data stored in criktx databases — including KYC documents, NID numbers, and financial transaction records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated periodically.

6.2 Access Controls

Access to criktx systems that contain personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to player account data is logged and subject to regular audit. criktx employees who handle personal data are bound by confidentiality obligations and receive regular training on data protection best practices.

6.3 Account Security Recommendations

In addition to the security measures we apply on our end, you can protect your criktx account by choosing a strong, unique password that is not used for any other online service; enabling any two-factor authentication options offered in your account settings; never sharing your login credentials with any other person; and logging out of your criktx account when using shared or public devices. If you believe your account has been compromised, contact [email protected] immediately.

6.4 Incident Response

In the event of a data security incident that is likely to result in a risk to your rights and freedoms, criktx will notify affected players without undue delay, providing details of the nature of the incident, the categories of data affected, the likely consequences, and the measures criktx is taking to address the breach and mitigate its effects.

7. Your Privacy Rights

As a player on the criktx platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt.

7.1 Right of Access

You have the right to request confirmation of whether criktx holds personal data about you and, if so, to receive a copy of that data together with information about how it is being used, where it came from, who it is shared with, and how long it will be retained. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data criktx holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. For account registration details such as your name or address, you can initiate a correction by contacting [email protected] and providing appropriate supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in circumstances where: the data is no longer necessary for the purposes for which it was collected; you withdraw your consent (where consent was the legal basis for processing); or the data has been processed unlawfully. Please note that criktx is legally required to retain certain categories of data — particularly KYC and financial transaction records — for defined minimum periods under AML regulations, and these cannot be deleted early regardless of your request.

7.4 Right to Restriction of Processing

You have the right to request that criktx restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while a complaint or legal claim relating to the data is being assessed.

7.5 Right to Object

Where criktx processes your personal data on the basis of legitimate interests (for example, for fraud prevention analytics), you have the right to object to that processing. criktx will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary in connection with legal claims.

7.6 Right to Withdraw Consent

Where criktx processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Contact & Complaints

If you have any questions, concerns, or complaints about how criktx handles your personal data, or if you wish to exercise any of the privacy rights described in this Policy, please contact our data protection team using the details below.

8.1 Contact Details

You can reach the criktx data protection team by email at [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" for general questions, or "Privacy Rights Request" when submitting a formal data subject rights request. We aim to acknowledge all privacy-related emails within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.

8.2 Complaints Process

If you are not satisfied with how criktx has handled your personal data or responded to a privacy rights request, you have the right to raise a formal complaint. To do so, send a written complaint to [email protected] with the subject line "Formal Privacy Complaint". Your complaint should include your full name, registered account email address, a description of the issue, the date(s) on which the relevant event(s) occurred, and any supporting documentation you consider relevant. criktx will investigate all formal complaints and provide a written response within 30 calendar days of receipt.

8.3 Policy Updates

criktx reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The current version of the Privacy Policy is always available at criktx.net/privacy-policy. The effective date at the top of this page indicates when the current version entered into force. Continued use of the criktx platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If any update materially affects your rights, criktx will notify registered account holders via email before the changes take effect.