crkix Privacy Policy
Your Data, Your Rights, Our Obligations

1 Data Controller Information

For the purposes of this Privacy Policy, crkix operates as the data controller responsible for the collection and processing of your personal data. The crkix platform is accessible at crkix.net and is operated for the benefit of online casino and sports betting players based in Bangladesh.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which your personal data is handled, please contact the crkix data support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

2 Data We Collect

crkix collects personal data through several channels during the account lifecycle: at registration, during gameplay and betting activity, through payment transactions, via customer support interactions, and through automated technical systems such as cookies and server logs. The categories of data we collect are described below.

2.1 Registration and Identity Data

When you create a crkix account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document).
• Date of birth (to verify that you are 18 years of age or older).
• Bangladeshi mobile phone number (used for OTP-based two-factor authentication).
• Email address (used for account communications and security alerts).
• Residential address in Bangladesh (required for KYC verification at withdrawal stage).
• Username and hashed password (your password is never stored in plain text).

2.2 Identity Verification (KYC) Documents

To comply with responsible gaming requirements and to prevent fraud and underage gambling, crkix may request copies of the following documents at the point of withdrawal or at any time our compliance team deems verification necessary:

• National Identity Card (NID) — front and back.
• Passport photo page.
• Birth certificate (for age verification where NID or passport is unavailable).
• Proof of address (utility bill or bank statement dated within 90 days).

2.3 Financial and Transaction Data

When you make deposits or request withdrawals in Bangladeshi Taka, crkix records:

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard).
• Mobile wallet number or masked bank/card details associated with each transaction.
• Transaction amounts (in BDT), timestamps, and reference IDs.
• Deposit and withdrawal history across the account lifetime.

crkix does not store full card numbers on its servers. Card payment data is tokenised by the relevant payment processor and is not directly accessible to crkix staff.

2.4 Gameplay and Betting Activity Data

The crkix platform records all gameplay and sports betting activity associated with your account, including:

• Games played, bet amounts, outcomes, and timestamps.
• Sports betting markets accessed, odds accepted, and settlement results.
• Bonus claims, wagering progress, and promotional interactions.
• Session duration and frequency of play — used for responsible gaming monitoring.

2.5 Technical and Device Data

When you access crkix via a web browser or mobile device, our servers automatically collect the following technical information:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Referring URL and pages visited within the crkix platform.
• Session start/end times and duration.

2.6 Customer Support Communications

If you contact crkix support via email at [email protected], we retain a record of that correspondence, including the content of messages, attachments submitted, and the outcome of any support case. This data is used to resolve disputes, improve support quality, and maintain an audit trail for compliance purposes.

3 How We Use Your Data

The personal data collected by crkix is used exclusively for the following purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

Where crkix relies on your consent as the legal basis for processing (for example, sending promotional emails or SMS messages about new cricket betting markets, slot releases, or seasonal promotions during Eid or Pohela Boishakh), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to your withdrawal.

4 Cookies and Tracking

crkix uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device by your web browser when you visit crkix.net. Cookies do not contain executable code and cannot be used to access other data on your device.

4.1 Types of Cookies Used

4.2 Managing Cookies

You may control or delete cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Samsung Internet on Android, and others commonly used by players in Dhaka, Chittagong, and Sylhet) allow you to block third-party cookies, clear existing cookies, and receive a notification before a new cookie is stored. Please note that disabling essential cookies will impair your ability to log in to and use the crkix platform.

5 Data Sharing and Disclosure

crkix does not sell, rent, or trade your personal data. However, in order to operate the platform and fulfil our legal obligations, it is sometimes necessary to share limited categories of data with trusted third parties. All such sharing is governed by contractual data protection agreements.

5.1 Payment Processors

To process deposits and withdrawals in Bangladeshi Taka, crkix shares transaction-relevant data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and the card networks Visa and Mastercard. These partners receive only the data necessary to complete the transaction and are contractually bound to handle it securely.

5.2 Game Content Providers

Games delivered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your account identifier and session token to initialise your game session. These providers do not receive your full name, payment details, or contact information.

5.3 Fraud Prevention and AML Service Providers

crkix uses third-party fraud detection and anti-money laundering (AML) screening services. Limited account and transaction data may be shared with these services for the purpose of risk scoring and compliance checks. Such providers are contractually prohibited from using your data for any other purpose.

5.4 Legal and Regulatory Disclosure

crkix may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or regulatory directive. In such cases, crkix will disclose only the minimum data necessary to comply with the relevant legal requirement and will, where permitted by law, notify the affected account holder of the disclosure.

5.5 Business Transfers

In the event of a merger, acquisition, or transfer of substantially all of crkix's assets, player data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same data protection obligations set out in this Privacy Policy, and affected players will be notified in advance.

6 Data Retention

crkix retains your personal data for as long as your account remains active and for a defined period following account closure, as required by applicable responsible gaming, anti-money laundering, and general data protection standards. The retention schedule below reflects crkix's standard practice.

Once the applicable retention period has expired, crkix will securely delete or irreversibly anonymise the relevant personal data. Anonymised aggregated data (with all identifiers removed) may be retained indefinitely for statistical and platform analytics purposes.

7 Your Privacy Rights

As a crkix account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. crkix will respond within 30 days and will not charge a fee for standard requests.

• Right of Access: You may request a copy of all personal data crkix holds about your account, including registration data, transaction history, KYC documents on file, and gameplay records.
• Right to Rectification: If any personal data held by crkix is inaccurate or incomplete, you have the right to request that it be corrected. For changes to name, date of birth, or NID details, supporting documentation will be required.
• Right to Erasure: Subject to legal and regulatory retention obligations, you may request that crkix delete your personal data. This right may be limited where data must be retained for AML, responsible gaming, or financial compliance purposes.
• Right to Restrict Processing: You may request that crkix temporarily suspend the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that crkix provide your personal data in a structured, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or for processing based on crkix's legitimate interests. Where your objection relates to marketing, it will always be honoured.
• Right to Withdraw Consent: Where crkix processes your data based on your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting prior lawful processing.

8 Data Security

crkix implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and crkix.net is encrypted using industry-standard TLS 1.2 or higher. This applies to login sessions, payment flows, and all API communications between your browser and our servers.
• Password hashing: Your crkix account password is hashed using a one-way cryptographic algorithm before storage. crkix staff cannot read your password — only you know it.
• OTP two-factor authentication: Account logins and withdrawal requests may require verification via a one-time password (OTP) sent to your registered Bangladeshi mobile number.
• Access controls: Internal access to player personal data is restricted on a need-to-know basis. Support staff can access only the data necessary to resolve your specific support case.
• Audit logging: All internal access to player data is logged with timestamps and staff identifiers. These audit logs are reviewed regularly as part of our internal compliance programme.
• Secure data centres: crkix data is hosted on servers with physical and network security controls including firewalls, intrusion detection systems, and 24/7 infrastructure monitoring.

While crkix takes extensive measures to protect your data, no internet-based system can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password for crkix, never sharing your OTP codes with anyone, and contacting [email protected] immediately if you suspect unauthorised access to your account.

9 Third-Party Services

The crkix platform integrates with a number of third-party technology and service providers to deliver core functionality. Each integration is governed by a data processing agreement, and crkix remains responsible for ensuring that third-party processors meet the data protection standards described in this Privacy Policy.

9.1 Game Providers

Live casino games, slots, and specialty titles supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios are delivered via embedded game clients. These providers may collect technical session data (such as round IDs and RNG seeds) for game integrity purposes. This data does not include your name, payment details, or contact information.

9.2 Payment Partners

Payment processors including bKash, Nagad, Rocket, and Upay operate under their own published privacy policies and are subject to Bangladesh Bank's relevant guidelines on mobile financial services. crkix is not responsible for the data handling practices of these providers beyond the transaction data it directly transmits to them.

9.3 Analytics Tools

crkix may use privacy-respecting analytics tools to understand aggregated platform usage patterns. Any analytics data shared with these tools is anonymised or pseudonymised before transmission. crkix does not use analytics tools that track your behaviour across other websites.

9.4 External Links

The crkix platform does not contain links to external third-party websites as part of its standard navigation or content areas. Should you independently navigate away from crkix.net to an external site, that site's own privacy policy governs the handling of your data and crkix bears no responsibility for it.

10 Policy Updates

crkix reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, data processing practices, legal obligations, or regulatory requirements. The date of the most recent update is displayed at the top of this page and in the last-updated notification bar immediately below the hero section.

For material changes — those that significantly affect the way we collect, use, or share your personal data — crkix will provide at least 7 days' advance notice via the email address registered to your account. Minor clarifications or corrections that do not affect your substantive privacy rights may be published without prior notification.

Your continued use of the crkix platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update, you should stop using the platform and may close your account by contacting [email protected] before the new policy takes effect.

The English-language version of this Privacy Policy is the authoritative version. In the event of any inconsistency between this document and any translated summary or communication, the English text prevails.