Your Privacy Matters at crixcex — Here Is How We Protect It

1 Data We Collect

When you create a crixcex account, we collect the following information:

• Full legal name (as it appears on your government-issued identification);
• Date of birth (to verify you are 18 years of age or older);
• Email address;
• Mobile phone number (used for account verification and security alerts);
• Preferred payment method and associated account identifier (e.g., bKash or Nagad mobile number);
• Username and encrypted password.

Before processing your first withdrawal, crixcex requires Know Your Customer (KYC) verification. During this process we may collect:

• A scanned or photographed copy of your National Identity Card (NID), passport, or driving licence issued by the Government of Bangladesh;
• A recent utility bill, bank statement, or similar document confirming your residential address (where enhanced verification is required);
• A selfie photograph for liveness verification purposes.

KYC documents are used exclusively for identity and age verification and are stored in accordance with the data retention schedule described in Section 7 of this policy.

When you deposit or withdraw funds, crixcex records transaction details including the payment method used, the transaction amount in Bangladeshi Taka (BDT), timestamps, and the reference numbers issued by payment processors such as bKash, Nagad, Rocket, and Upay. We do not store full card numbers for Visa or Mastercard transactions — card payments are tokenised by our payment gateway partners.

crixcex maintains a full record of your betting and gaming activity on the platform, including bets placed, games played, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting obligations.

When you visit crixcex.net, our servers automatically collect certain technical information, including:

If you contact crixcex via email, live chat, or any other channel, we retain a record of the correspondence including the content of your messages, timestamps, and any attachments. This is used for support resolution, quality assurance, and dispute management.

2 How We Use Your Data

crixcex processes your personal data on the following legal bases and for the following purposes:

The majority of data processing at crixcex is necessary to fulfil our contractual obligations to you as a registered player. This includes:

• Creating and managing your crixcex player account;
• Processing deposits and withdrawals via your chosen payment method;
• Settling bets and crediting winnings to your account balance;
• Providing customer support and resolving disputes;
• Sending transactional communications such as deposit confirmations, withdrawal approvals, and security alerts.

crixcex is required to process certain categories of personal data to comply with applicable laws and regulations. This includes KYC and age verification, anti-money laundering (AML) checks, fraud screening, and retention of financial records. We will retain this data for as long as required by law, regardless of account status.

Where we have a legitimate business interest that does not override your fundamental privacy rights, crixcex may process your data for the following purposes:

• Detecting, investigating, and preventing fraud, money laundering, and bonus abuse;
• Monitoring platform usage to improve performance, stability, and the overall player experience;
• Conducting internal analytics on aggregated, anonymised data to understand player behaviour trends;
• Enforcing the crixcex Terms & Conditions and protecting the security of the platform.

With your explicit consent — given during registration or through your account communication preferences — crixcex may send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, BPL special offers, or Pohela Boishakh cashback deals), and platform updates. You may withdraw this consent at any time by updating your preferences in your account settings or by emailing [email protected].

crixcex uses your gaming activity data to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, we may proactively contact you to offer responsible gaming tools or, where necessary under our responsible gaming obligations, apply protective account restrictions. See our Responsible Gaming page for full details.

3 Data Sharing & Third Parties

To process deposits and withdrawals, crixcex shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and our card payment gateway for Visa and Mastercard transactions. These providers receive only the minimum data required to process the specific transaction and operate under their own privacy frameworks.

crixcex works with specialised KYC and identity verification service providers to validate the documents you submit during the verification process. These partners process your identity documents on our behalf and are contractually restricted from retaining or using your data beyond the verification function.

The games available on crixcex are powered by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive anonymised session data to support game integrity and fairness certification. They do not receive your identifiable personal data unless required for specific dispute resolution processes.

crixcex uses analytics tools and cloud infrastructure providers to operate and improve the platform. These providers process technical and usage data (such as page views, session durations, and device types) on our behalf under strict data processing agreements.

crixcex may disclose your personal data to law enforcement agencies, regulators, or other authorities where we are required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosures where legally permitted to do so.

In the event that crixcex undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy commitments applicable to your data under the new entity.

4 Cookies & Tracking Technologies

crixcex uses cookies and similar technologies to operate the platform, remember your preferences, and understand how our website is used. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

Strictly necessary cookies are required for the platform to function and cannot be disabled. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to block, delete, or be notified before cookies are placed. Please be aware that disabling functional or analytics cookies may affect your experience on crixcex.net.

In addition to cookies, crixcex may use browser local storage to persist session preferences and may collect device fingerprint data — a combination of technical device attributes — for the purpose of fraud detection and duplicate account identification. This data is processed solely for platform security purposes and is not used for marketing profiling.

5 Data Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers;
• Encryption at rest for sensitive personal data stored in our databases, including identity documents and payment identifiers;
• Password hashing using industry-standard algorithms — your password is never stored in plain text;
• Two-factor authentication (2FA) available for all player accounts to add an additional layer of login security;
• Firewall and intrusion detection systems monitoring network traffic for anomalous patterns 24 hours a day, 7 days a week;
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities.

• Access to personal data is restricted on a strict need-to-know basis. crixcex staff members are granted only the minimum data access required to perform their specific role;
• All employees and contractors with access to personal data are bound by confidentiality obligations;
• Internal data handling procedures are reviewed and updated on a regular basis;
• A designated data protection point of contact oversees compliance with this Privacy Policy and handles player data requests.

In the event of a personal data breach that poses a risk to your rights and freedoms, crixcex will notify affected players promptly via their registered email address. Notifications will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps crixcex has taken or intends to take to address it.

While crixcex takes comprehensive measures to protect your data, you also play a role in keeping your account secure. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and logging out of your account on shared devices. crixcex will never ask for your password via email, chat, or any other channel.

6 Your Privacy Rights

As a crixcex player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". crixcex will acknowledge your request within 48 hours and fulfil it within 5 Bangladesh Standard Time (BST, UTC+6) business days, except where a legal exemption applies.

To protect your personal data, crixcex will verify your identity before processing any privacy rights request. You will be asked to confirm account details consistent with your registered profile. crixcex will not fulfil data subject requests where identity cannot be adequately verified, as this would itself constitute a data breach risk.

7 Data Retention

crixcex retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Where a player's account is subject to an active investigation — whether related to fraud, AML, a disputed transaction, or a regulatory inquiry — data relevant to that investigation will be retained for the duration of the investigation regardless of the standard retention schedule above. crixcex will inform the player that their data is being retained under this exemption where legally permitted to do so.

8 Policy Updates & Contact

crixcex reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technology, legal requirements, or the services we offer. Material changes — those that meaningfully affect how we process your personal data or reduce your privacy rights — will be communicated to registered players via their registered email address no fewer than 7 days before the changes take effect.

Non-material updates (such as corrections to spelling, grammar, or formatting changes that do not alter the substance of the policy) may be applied without advance notice. The "Effective" date shown at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed of how crixcex protects your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact the crixcex privacy team at:

Email: [email protected]
Subject line: Privacy Policy Query
Response time: Within 5 Bangladesh Standard Time (BST, UTC+6) business days

crixcex is strictly an 18+ platform. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that personal data has been collected from an individual who is under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on crixcex, please contact us at [email protected] without delay.