Cricex ("we," "us," "the Platform") operates the online casino and sports betting platform at cricex-bangla.com. This Privacy Policy applies to all personal data collected from users ("you," "the player") when you register an account, make a deposit or withdrawal, place a bet, use our live casino, contact support, or browse any part of the Cricex website or mobile platform.
Cricex is the data controller for all personal information described in this policy. That means we decide what data is collected and how it is used. Where we work with third-party processors — such as payment gateways for Easypaisa, JazzCash, NayaPay, and SadaPay — those processors handle data only on our instructions and only for the purposes we describe here.
If you have questions about how Cricex handles your data, you can reach our privacy team at support@cricex-bangla.com at any time. This policy is written in English and is the authoritative version for all Cricex users.
By registering a Cricex account or continuing to use the platform after a policy update, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please do not create an account or contact us to close an existing one.
Cricex collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party verification and payment services. We collect only what we genuinely need — not everything we technically could.
2.1 Information You Provide Directly
- Registration data: Your full legal name, date of birth, mobile number (used as your account identifier), and self-selected password.
- Identity verification (KYC) documents: CNIC (front and back), selfie with CNIC, and proof of payment method ownership as required before your first withdrawal.
- Payment information: Your Easypaisa/JazzCash/NayaPay/SadaPay mobile number or bank account details used for deposits and withdrawals. Cricex does not store full card numbers — card payments are processed by certified payment gateways who handle card data under their own security standards.
- Communications: Records of your live chat messages, emails, and any other correspondence with Cricex support, including the content and timestamp of each exchange.
- Responsible gaming settings: Deposit limits, self-exclusion preferences, and cooling-off requests you configure in your account settings.
2.2 Information Generated Automatically
- Device and connection data: Your IP address, device type, operating system version, browser type, and mobile network operator.
- Session data: Login timestamps, session duration, pages visited within the platform, and features interacted with.
- Betting and gaming history: A complete record of every bet placed, game played, stake amount, outcome, and payout on your account.
- Transaction history: Timestamps and amounts for all deposits, withdrawals, and bonus credits on your account.
- Cookies and similar technologies: As described in Section 8 of this policy.
2.3 Information from Third Parties
- Identity verification providers: Where Cricex uses a third-party service to verify your CNIC against official records, that service returns a pass/fail result — Cricex does not receive your data from the government database directly.
- Payment processors: Confirmation of transaction status (successful, failed, reversed) from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners. We do not receive your full wallet credentials from these providers.
- Fraud prevention services: Risk scoring signals used to detect suspicious account activity, returned as a score or flag rather than raw personal data.
| Data Category | Examples | Collected At | Required? |
|---|---|---|---|
| Identity | Name, DOB, CNIC | Registration + KYC | Yes — mandatory |
| Contact | Mobile number | Registration | Yes — mandatory |
| Financial | Wallet number, bank details | First deposit/withdrawal | Yes — for payments |
| Betting history | Stakes, outcomes, game logs | Automatically — ongoing | Yes — platform function |
| Device / technical | IP address, device type | Automatically — on login | Yes — security |
| Communications | Support chat, emails | When you contact us | Only when you contact us |
| Cookies | Session tokens, preferences | Automatically — on visit | Essential only — required |
Every piece of data Cricex collects is used for a specific, documented purpose. The table below maps our main data uses to the categories of data involved.
Cricex does not use your personal data to build advertising profiles, sell your information to data brokers, or share your betting history with any third party for commercial purposes unrelated to operating your account.
Cricex processes your personal data on the following legal bases, depending on the purpose:
- Contract performance: Processing necessary to provide the services you signed up for — account creation, bet placement, payment processing, and customer support. Without this data we cannot operate your account.
- Legal obligation: Processing required by law — identity verification (KYC), anti-money laundering (AML) checks, and retention of financial records for the periods mandated by applicable regulations.
- Legitimate interest: Processing for fraud prevention, security monitoring, and responsible gaming compliance — where our legitimate interest in protecting the platform and its players does not override your privacy rights.
- Consent: Where you have explicitly opted in to receive promotional communications from Cricex. You may withdraw this consent at any time through your account notification settings.
Cricex shares your personal data with a limited set of third parties, each operating under strict contractual obligations that prevent them from using your data for their own purposes or sharing it further.
5.1 Payment Processors
To process deposits and withdrawals, Cricex shares your mobile wallet number or bank account details with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank. These providers receive only what is needed to process the specific transaction. They operate under their own privacy policies and are not permitted to use your data for any purpose other than processing the Cricex transaction.
5.2 Identity Verification Services
KYC verification may involve sharing your CNIC details with a certified identity verification service. This service returns only a pass/fail result to Cricex. Your document images are not retained by the verification service beyond the period needed to process the check.
5.3 Fraud Prevention Services
Cricex uses third-party fraud scoring services that receive device fingerprint and behavioural data to generate risk assessments. These services do not receive your name, CNIC, or financial details — only technical data points associated with your session.
5.4 Legal and Regulatory Authorities
Cricex will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, or where we are legally permitted to do so in connection with suspected fraud, money laundering, or other serious criminal activity. We will notify affected users of such disclosures where legally permitted to do so.
5.5 What We Will Never Do
- Sell your personal data to any third party for commercial purposes.
- Share your betting history or financial data with advertising networks.
- Transfer your data to a country without adequate data protection standards without appropriate safeguards in place.
- Allow any third party to use your data for their own marketing without your explicit opt-in consent.
Cricex applies multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure:
- TLS encryption in transit: All communication between your browser or app and Cricex servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this is active.
- Encrypted data at rest: Sensitive fields — CNIC numbers, bank account details, and KYC document references — are encrypted in Cricex's databases. Plain-text personal data is never stored in logs.
- Access controls: Cricex staff access to personal data is role-based and logged. Support agents can see only the information needed for their specific function. No single employee has unrestricted access to the full user database.
- Two-factor authentication: OTP-based verification is required for login and for withdrawal requests, preventing account access even if a password is compromised.
- Fraud monitoring: Automated systems monitor login activity, transaction patterns, and device changes around the clock. Anomalies trigger alerts and, where necessary, temporary account holds pending review.
- Payment data isolation: Full payment card numbers and wallet credentials are handled by certified payment gateways — not stored on Cricex servers. Cricex stores only transaction reference identifiers.
No system is entirely immune to security incidents. In the unlikely event of a data breach that affects your personal data, Cricex will notify you via your registered mobile number as quickly as possible and take all available steps to contain and remediate the breach.
Cricex retains your personal data only for as long as it is needed for the purpose it was collected, or as required by law. The table below summarises our standard retention periods.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account identity data (name, CNIC, DOB) | Account lifetime + 5 years | AML legal requirement |
| Transaction and financial records | Account lifetime + 5 years | Financial regulation compliance |
| Betting and gaming history | Account lifetime + 2 years | Dispute resolution & responsible gaming |
| Support communications | 3 years from last interaction | Complaint resolution records |
| Device and session data (logs) | 13 months | Security & fraud investigation |
| KYC documents (images) | Account lifetime + 5 years | Regulatory verification requirement |
| Closed/self-excluded accounts | 5 years from closure | Prevent re-registration during exclusion |
After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to you. Where anonymised data is retained for analytics purposes, it no longer constitutes personal data under this policy.
Cricex uses cookies — small text files stored on your device — and similar technologies to keep the platform running properly, maintain your session, and understand how players use the site in aggregate. We do not use advertising cookies or allow third-party ad networks to place cookies on Cricex pages.
You can manage or clear cookies through your browser settings at any time. Clearing essential cookies will log you out of your Cricex session. Cricex does not use browser fingerprinting for tracking beyond the fraud prevention use described in Section 5.3.
As a Cricex user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@cricex-bangla.com. We will respond within 30 days. In most cases we will ask you to verify your identity before fulfilling a request to protect against unauthorised data access.
Right to Access
Request a copy of all personal data Cricex holds about you, including your account details, KYC documents, betting history, and transaction records.
Right to Correct
Ask us to correct inaccurate personal data — for example, a misspelled name or an incorrect date of birth. We will update records within 14 days of verification.
Right to Delete
Request deletion of your personal data. Note: data subject to legal retention requirements (financial records, KYC under AML law) cannot be deleted until the retention period expires.
Right to Data Portability
Request your personal data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service if you choose.
Right to Restrict Processing
Ask Cricex to pause processing your data — for example, while you dispute the accuracy of a record — without deleting it. Your account may be limited during this period.
Right to Object
Object to processing based on legitimate interest. If you object to fraud monitoring or responsible gaming checks, we may need to restrict or close your account as these are core platform functions.
Cricex is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you are under 18, you must not create a Cricex account or use any part of the platform. If you are a parent or guardian and believe your child has registered on Cricex, please contact us immediately at support@cricex-bangla.com and we will close the account, delete the associated data, and return any deposited funds.
Age is verified at registration through date of birth declaration and confirmed through KYC document review before withdrawals are processed. Accounts where the verified age is below 18 will be suspended and all funds returned.
Cricex may update this Privacy Policy when our data practices change, when we add new features that involve personal data, or when legal requirements change. When we make material changes — changes that affect how your data is used, who it is shared with, or what rights you have — we will notify you via your registered mobile number at least 7 days before the new policy takes effect.
The "Last updated" date at the top of this page shows when the current version was published. We recommend reviewing this page periodically. Continued use of Cricex after the effective date of any update constitutes acceptance of the revised policy. If you do not accept the updated policy, please stop using the platform and contact us to close your account.
If you are reading a cached or printed copy of this policy, please verify you are reading the current version at cricex-bangla.com/privacy-policy. The version published on the website is always authoritative.
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact Cricex through any of the following channels:
- Email: support@cricex-bangla.com — use the subject line "Privacy Request" for faster routing to our privacy team.
- Live chat: Available 24/7 on any page of the Cricex platform when you are logged in. The fastest way to get a response for urgent issues.
- Response time: Privacy requests acknowledged within 4 hours, substantively responded to within 30 days as required.
When you contact us about a privacy request, please include your registered mobile number and a brief description of your request. We will verify your identity before processing any data access, correction, or deletion request to make sure we are acting on a genuine request from the account holder.
For information about your other rights as a Cricex user — including bet disputes, withdrawal issues, and responsible gaming tools — please visit the FAQ page or the Responsible Gaming section.