cricxo Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how cricxo ("we", "us", "our") collects, processes, stores, and protects personal information provided by or collected from individuals ("you", "your", "the Player") who access or use the cricxo platform at cricxo.biz, including all associated services such as cricket betting, live casino gaming, slot games, account management, and customer support.

cricxo is committed to protecting the privacy of all players who use our platform in Bangladesh. We handle all personal data with care, transparency, and respect. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the cricxo platform.

This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, both of which are available on the cricxo platform. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of that inconsistency.

2 Data We Collect

cricxo collects personal data from you through several channels: directly when you register an account or contact support, automatically as you interact with the platform, and from third-party identity verification and payment service providers. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (collected to verify that you are at least 18 years of age);
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and district;
• Mobile phone number used for account verification and support communications;
• Email address for account notifications and support correspondence;
• Username and hashed password for account authentication.

2.2 Identity Verification (KYC) Documents

• Copies of government-issued identification such as National Identity Card (NID) or passport;
• Proof of address documents such as recent utility bills or bank statements;
• Selfie photographs or video verification images where required to confirm identity.

2.3 Financial & Transaction Data

• Mobile financial service account numbers associated with bKash, Nagad, Rocket, or Upay transactions;
• Deposit and withdrawal transaction records including amounts in BDT, timestamps, and reference numbers;
• Betting and gaming transaction history including wagers placed, outcomes, and account balance movements.

2.4 Technical & Usage Data

• IP address and approximate geolocation data derived from it;
• Device type, operating system, browser type and version;
• Session logs including login timestamps, pages visited, and features accessed;
• Clickstream data and interaction patterns used for platform analytics and fraud detection.

2.5 Communications Data

• Content of messages sent to and received from the cricxo customer support team via email or live chat;
• Feedback, complaints, and dispute correspondence submitted by the Player.

3 How We Use Your Data

cricxo uses the personal data we collect for specific, legitimate purposes directly related to operating the platform and fulfilling our obligations to you as a player. We do not use your data for purposes that are incompatible with those stated below.

Where we use your data for direct marketing or promotional communications, we will only do so with your explicit consent. You may withdraw consent for marketing communications at any time by contacting [email protected] or updating your account notification preferences.

4 Legal Basis for Processing

cricxo processes your personal data on the following legal grounds, which reflect internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and cricxo — including account creation, payment processing, and the delivery of gaming services.
• Legitimate interests: Processing necessary for cricxo's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) checks, age verification requirements, and responses to lawful requests from competent authorities.
• Consent: Processing carried out on the basis of your freely given and informed consent, such as receiving promotional emails or participating in optional surveys. Consent may be withdrawn at any time without affecting processing carried out prior to withdrawal.

5 Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They help the site remember information about your visit, such as your preferred language, login status, and the items you have interacted with. The cricxo platform uses cookies and similar tracking technologies (such as local storage and session storage) to operate core site functionality and to analyse usage patterns.

5.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. The platform cannot operate properly without these.
• Functional cookies: Remember your preferences such as display settings and last-visited game categories to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how Players navigate the platform, which pages receive the most visits, and where users encounter difficulties. This data is used solely to improve the cricxo platform.
• Fraud prevention cookies: Used to detect unusual activity patterns, multiple account creation attempts, and other indicators of fraudulent behaviour.

5.3 Managing Cookies

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will impair your ability to log in to and use the cricxo platform. Detailed instructions for managing cookies are available in the help documentation of all major browsers.

6 Third-Party Data Sharing

cricxo does not sell, rent, or trade your personal data to third parties. We share your data only in the following limited and controlled circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who assist us in operating the cricxo platform. These include identity verification (KYC) providers, payment processing partners (bKash, Nagad, Rocket, Upay), game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and fraud detection services. All service providers are contractually bound to process your data only for the purposes specified by cricxo and to maintain appropriate security standards.

6.2 Legal & Regulatory Disclosure

cricxo may disclose your personal data to competent governmental authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or other binding legal process. In such cases, cricxo will disclose only the minimum amount of data necessary to satisfy the legal requirement.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cricxo's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms prior to the transfer taking effect.

7 Data Retention

cricxo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account data and KYC documents: Retained for the lifetime of your account and for a period of at least five (5) years following permanent account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction to support financial reconciliation, dispute resolution, and regulatory compliance.
• Customer support communications: Retained for a period of three (3) years from the date of the most recent communication in a given support thread.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are either deleted or anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following its withdrawal, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

8 Your Privacy Rights

As a Player on the cricxo platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "PRIVACY REQUEST" and your registered account details.

• Right of access: You may request a copy of the personal data cricxo holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data held in your cricxo account. Where possible, you can update basic information directly in your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer needed for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that cricxo limit the processing of your data — for example, while a correction request is being assessed.
• Right to data portability: You may request that cricxo provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data where it is based on cricxo's legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cricxo will respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

9 Data Security

cricxo implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:

• SSL/TLS encryption on all data transmitted between your browser or device and the cricxo platform;
• One-way cryptographic hashing of all account passwords, meaning that plain-text passwords are never stored or accessible to any member of staff;
• Role-based access controls ensuring that only authorised personnel with a documented business need can access specific categories of personal data;
• Regular security audits and vulnerability assessments conducted on the platform infrastructure;
• Two-factor authentication available for account login to provide an additional layer of protection against unauthorised access;
• Fraud monitoring systems that analyse transaction patterns and login behaviour in real time to detect and respond to suspicious activity.

Despite the robust security measures in place, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights or freedoms, cricxo will notify affected Players and take immediate remedial action in accordance with our incident response procedures.

10 Children's Privacy

The cricxo platform is strictly intended for adults aged 18 years and above. cricxo does not knowingly collect personal data from any person under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account without delay.

If you are a parent or guardian and believe that a person under your care has registered on the cricxo platform or provided us with personal information without your consent, please contact us immediately at [email protected] so that we can investigate and take the appropriate action. For further guidance on preventing underage gambling, please refer to the Responsible Gaming page.

11 Changes to This Privacy Policy

cricxo reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Players by email and display a prominent notice on the cricxo platform for a reasonable period prior to the changes taking effect.

The updated Policy will always display the revised effective date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the cricxo platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or cricxo's data practices, please contact our support team using the details below. All privacy communications are handled in English and treated with strict confidentiality.

• Email: [email protected]
• Subject Line for Privacy Requests: PRIVACY REQUEST
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 30 days for formal privacy rights requests; within 24 hours for general privacy enquiries

For matters specifically related to responsible gaming, self-exclusion, or account limits, please visit the dedicated Responsible Gaming page or include "RESPONSIBLE GAMING" in the subject line of your email to ensure prompt handling by the relevant team.