crkiex Privacy Policy
At crkiex, we treat your personal data with the same care we apply to your gaming experience. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and how we keep it secure — all in plain, clear English.
Information We Collect
crkiex collects personal information about you in three broad ways: information you provide to us directly when you register or use our platform, information generated automatically as you interact with our services, and information received from trusted third-party partners such as payment processors and identity verification providers. We collect only the information that is necessary for the purposes described in this Privacy Policy.
Information You Provide Directly
When you register for a crkiex account, complete KYC identity verification, make a deposit or withdrawal, or contact our support team, you may provide us with some or all of the following categories of personal data:
- Identity Information: Your full legal name, date of birth, and government-issued identification number (such as your National Identity Card number issued by the Government of Bangladesh).
- Contact Information: Your residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.
- Payment Information: Your registered bKash, Nagad, Rocket, or Upay mobile number; Dutch-Bangla Bank, City Bank, BRAC Bank, or Islami Bank account details relevant to processing deposits and withdrawals. crkiex does not store full bank card numbers or mobile PIN codes.
- KYC Documentation: Scanned copies or photographs of your National Identity Card (NID), passport, utility bills, bank statements, or other documents submitted during identity verification.
- Communications Data: Records of your interactions with crkiex support, including email correspondence, live chat transcripts, and any feedback or complaint submissions you make to [email protected].
Information Collected Automatically
When you access the crkiex platform — whether via a web browser on a desktop or a mobile device — our systems automatically collect certain technical and behavioural data:
| Data Category | Examples | Purpose |
|---|---|---|
| Device Information | Device type, operating system version, browser type and version, screen resolution | Platform optimisation and fraud detection |
| Network Information | IP address, approximate geolocation (country and city level), internet service provider | Security, geo-restriction compliance, fraud prevention |
| Usage Data | Pages visited, time spent on each section, game titles launched, bet amounts, session start and end times | Platform improvement, responsible gaming monitoring, personalisation |
| Transaction Logs | Deposit amounts in BDT (৳), withdrawal requests, bonus claims, bet history, win/loss records | Account management, financial record-keeping, dispute resolution |
| Cookie and Tracker Data | Session cookies, persistent preference cookies, analytics identifiers | Session management, analytics, user experience — see Cookies section below |
Information from Third Parties
crkiex may receive information about you from third-party partners in the following circumstances:
- Payment Processors: bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) share transaction confirmation data with crkiex for the purpose of verifying that deposits and withdrawals have been processed successfully.
- Identity Verification Providers: Where crkiex uses a third-party KYC service to verify your identity documents, that provider may return a verification result and a risk score to crkiex. crkiex does not receive the raw biometric data processed by such providers.
- Fraud Prevention Services: Third-party fraud and anti-money laundering screening tools may provide crkiex with risk signals linked to your device fingerprint, IP address, or payment method, which crkiex uses to assess account integrity.
How We Use Your Data
crkiex processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The table below summarises the main purposes for which crkiex processes your personal data, together with the legal basis for that processing.
| Processing Purpose | Data Used | Legal Basis |
|---|---|---|
| Registering and maintaining your crkiex account | Identity, contact, and authentication data | Contract performance |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, and banking partners | Payment information, transaction logs | Contract performance |
| Verifying your identity and age (KYC / 18+ compliance) | Identity documents, date of birth, NID number | Legal obligation |
| Detecting and preventing fraud, money laundering, and prohibited conduct | Device info, IP address, transaction logs, behaviour data | Legal obligation and legitimate interest |
| Administering bonuses, promotions, and player rewards | Account activity, bet history, deposit history | Contract performance |
| Providing responsible gaming tools (deposit limits, self-exclusion) | Account activity, gaming session data | Legal obligation and legitimate interest |
| Responding to support queries and resolving disputes | Communications data, transaction logs, game history | Contract performance and legitimate interest |
| Sending service notifications (account changes, security alerts, policy updates) | Contact information | Contract performance and legitimate interest |
| Improving platform features and user experience analytics | Usage data, device information, cookie data | Legitimate interest |
| Sending optional marketing communications about promotions (only with your consent) | Contact information, preference data | Consent |
Marketing Communications
crkiex may send you promotional emails or SMS messages about new games, seasonal offers (such as BPL cricket promotions, Eid bonus campaigns, or Pohela Boishakh special events), and reload bonuses — but only if you have explicitly consented to receive such communications at the time of registration or via your account communication preferences. You may withdraw your consent to receive marketing messages at any time by contacting [email protected] or by following the opt-out instructions included in each marketing message. Withdrawing marketing consent does not affect the processing of your data for non-marketing purposes under other legal bases.
Automated Decision-Making
crkiex uses automated systems to screen accounts and transactions for fraud, money laundering indicators, and bonus abuse patterns. These automated systems may result in your account being flagged for manual review or, in serious cases, temporarily suspended pending investigation. Where an automated decision has a significant effect on you — such as a withdrawal hold or account suspension — you have the right to request human review of that decision by contacting our support team.
Cookies and Tracking Technologies
The crkiex platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse usage patterns, and maintain the security of your session. This section explains the types of cookies crkiex uses and how you can manage them.
What Are Cookies?
Cookies are small text files placed on your device by the websites you visit. They are widely used to make websites work efficiently and to provide analytical information to website owners. Cookies cannot execute programs or deliver viruses to your device. The data stored in cookies placed by crkiex is associated with your crkiex session or account and is not linked to your name or other directly identifying information beyond your account identifier.
Types of Cookies Used by crkiex
| Cookie Type | Description | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Required for the platform to function — login session management, security tokens, fraud prevention signals | Session / up to 24 hours | No — disabling these will break platform functionality |
| Functional / Preference | Remember your language setting (English), display preferences, and game layout choices | Up to 90 days | Yes — via browser settings, with some loss of convenience |
| Analytics | Measure how users interact with pages, which games are most popular, and where users encounter errors — aggregate data only | Up to 12 months | Yes — opt out via browser settings or cookie preferences |
| Security | Detect unusual login patterns, multiple failed authentication attempts, and session hijacking indicators | Session / rolling | No — required for account protection |
Managing Your Cookie Preferences
Most modern web browsers allow you to control cookies via their settings menu. You can set your browser to refuse all cookies, to accept only certain categories of cookies, or to notify you before a cookie is placed. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use the crkiex platform. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. crkiex does not operate a separate cookie consent management platform at this time — cookie preferences are managed at the browser level.
No Third-Party Advertising Cookies
crkiex does not place third-party advertising cookies or allow advertising networks to track your activity across other websites using cookies served from the crkiex domain. The analytics data collected via crkiex's own analytics cookies is used exclusively for internal platform improvement and is not shared with advertising platforms or data brokers.
Data Sharing and Disclosure
crkiex does not sell, rent, or trade your personal data to third parties for commercial gain. Your data is shared only in the specific, limited circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.
Service Providers and Operational Partners
crkiex shares personal data with carefully selected third-party service providers who process data on crkiex's behalf under binding contractual data processing agreements. These providers are permitted to use your data only for the purposes specified by crkiex and may not use it for their own commercial purposes. Categories of service providers include:
- Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, and Islami Bank — receive transaction data strictly necessary to process your deposits and withdrawals.
- Identity Verification (KYC) Providers: Receive copies of your identity documents and return a verification status to crkiex. These providers are bound by strict data protection and confidentiality obligations.
- Game Content Providers: Pragmatic Play, NetEnt, Microgaming, Play'n GO, Red Tiger, Spribe, and Ezugi operate the game engines and receive a session token and anonymous player identifier to enable game play. They do not receive your name, address, or payment details.
- Fraud Prevention and AML Screening Services: Receive device fingerprint data, IP address, and transaction metadata to return risk scores used in crkiex's fraud detection workflow.
- Cloud Infrastructure Providers: Host crkiex's platform servers and databases. All data hosted is encrypted at rest using industry-standard AES-256 encryption.
- Customer Support Tools: The platform used by crkiex's support agents to manage and respond to your queries. Agents access only the data necessary to resolve your specific support request.
Legal and Regulatory Disclosure
crkiex may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies without prior notice to you in the following circumstances:
- Where crkiex is required to do so by applicable law, court order, or binding regulatory direction.
- Where crkiex is required to file a suspicious activity report (SAR) with relevant financial intelligence or anti-money laundering authorities in connection with your account activity.
- Where disclosure is necessary to protect the safety of crkiex staff, other players, or the public.
- Where disclosure is necessary to enforce these Terms, protect crkiex's legal rights, or defend against legal claims.
Data Security Measures
crkiex takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. No security system is entirely impenetrable, but crkiex continuously reviews and updates its security controls to address emerging threats.
Technical Security Controls
- 256-bit SSL/TLS Encryption in Transit: All data transmitted between your browser or mobile device and crkiex's servers is encrypted using 256-bit SSL/TLS. The padlock icon in your browser address bar confirms that your connection to crkiex is secured.
- AES-256 Encryption at Rest: Sensitive personal data stored in crkiex's databases — including KYC documents, payment account identifiers, and authentication credentials — is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the encrypted data.
- Password Hashing: Your account password is never stored in plain text. crkiex stores a cryptographic hash of your password using a modern, salted hashing algorithm. Even crkiex support staff cannot retrieve your original password.
- OTP Authentication: Sensitive account actions — including login from a new device, password reset, and large withdrawal requests — may require one-time password (OTP) verification sent to your registered mobile number in Bangladesh.
- Firewalls and Intrusion Detection: crkiex's servers are protected by enterprise-grade firewalls and network intrusion detection systems that monitor for and block unauthorised access attempts in real time.
- Access Controls: Access to personal data within crkiex's internal systems is restricted to employees and contractors who have a legitimate need to access it to perform their job functions. Access rights are reviewed regularly and revoked promptly when no longer needed.
Organisational Security Measures
- All crkiex staff and contractors with access to personal data are bound by confidentiality obligations under their employment or service agreements.
- crkiex conducts regular internal reviews of data handling procedures to identify and remediate potential vulnerabilities.
- In the event of a personal data breach that poses a risk to your rights and interests, crkiex will notify affected players promptly via the email address on file and take immediate steps to contain and remediate the breach.
Your Responsibility
While crkiex implements strong security measures on its side, the security of your account also depends on actions you take. You are responsible for keeping your crkiex login credentials confidential, not sharing your OTP codes with anyone, using a strong and unique password, and logging out of your account when using a shared device. If you believe your account has been compromised, contact [email protected] immediately.
Data Retention Policy
crkiex retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises crkiex's standard retention periods for the main categories of personal data we hold.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data (name, email, mobile number) | Duration of account plus 5 years after closure | Legal obligation, dispute resolution, AML compliance |
| KYC identity documents | Duration of account plus 5 years after closure | Regulatory requirement, fraud prevention record-keeping |
| Financial transaction records (deposits, withdrawals) | 7 years from the date of each transaction | Financial record-keeping legal obligation |
| Game history and bet records | 5 years from the date of each game session | Dispute resolution, responsible gaming monitoring |
| Support communications and complaint records | 3 years from the date of the last communication | Quality assurance, dispute resolution |
| Marketing consent records | Until consent is withdrawn plus 3 years | Evidence of consent for regulatory audit purposes |
| Analytics and usage data (anonymised) | Up to 24 months on a rolling basis | Platform improvement — stored in anonymised form only |
Where crkiex retains data beyond account closure due to a legal retention obligation, that data is held in a restricted-access archive and is not used for any active processing purpose such as marketing or platform analytics. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.
Your Privacy Rights
As a registered crkiex player based in Bangladesh, you have the following rights in relation to your personal data held by crkiex. crkiex is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. To exercise any of the rights listed below, please submit your request in writing to [email protected] with the subject line "Privacy Rights Request" and your registered account details.
- Right to Access: You have the right to request a copy of the personal data crkiex holds about you, the purposes for which it is being processed, the categories of recipients to whom it has been disclosed, and the retention period applied. crkiex will provide this information within 30 calendar days of receiving a valid request.
- Right to Rectification: If you believe that any personal data crkiex holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update certain account details (such as your contact email or mobile number) directly from your account settings page. For changes to identity documents or KYC-verified information, a support request and re-verification may be required.
- Right to Erasure ("Right to Be Forgotten"): You may request that crkiex delete your personal data. Note that this right is not absolute — crkiex may be required to retain certain data for the retention periods described above due to legal and regulatory obligations. Where erasure is not possible in full, crkiex will explain which data must be retained and why, and will restrict active processing of the remaining data.
- Right to Restriction of Processing: You may request that crkiex limit the processing of your data in specific circumstances — for example, if you contest the accuracy of data we hold while we investigate the matter, or if you have objected to processing based on legitimate interest while we assess your objection.
- Right to Object to Processing: Where crkiex processes your data on the basis of legitimate interest (for example, for analytics or fraud prevention purposes), you have the right to object. crkiex will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Marketing Consent: Where you have given consent to receive promotional and marketing communications from crkiex, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to Human Review of Automated Decisions: Where a significant automated decision has been made in relation to your account (such as a withdrawal hold or account suspension triggered by an automated risk system), you have the right to request that a human member of crkiex's team reviews that decision.
crkiex will acknowledge all privacy rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and aim to resolve them within 30 calendar days. In complex cases, the resolution period may be extended by a further 30 days, in which case crkiex will notify you of the extension and the reason for it.
Contact and Policy Updates
Contacting crkiex About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way crkiex handles your personal data, please contact our support team in writing. The dedicated privacy enquiry contact for crkiex is:
Email: [email protected] (subject line: "Privacy Enquiry")
Response target: Within 5 business days, Bangladesh Standard Time (UTC+6)
Platform: https://crkiex.net
All privacy-related correspondence must be submitted in English. Submissions in other languages may be returned with a request to resubmit in English to ensure accurate processing of your query.
Updates to This Privacy Policy
crkiex reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, and feedback from players and regulators. When material changes are made, crkiex will notify registered players via email to the address on file and will display a prominent notice on the crkiex platform for a minimum of 30 days following the update.
The most current version of this Privacy Policy is always available at https://crkiex.net/privacy-policy. We encourage you to review the Privacy Policy periodically. Your continued use of the crkiex platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.
The current version of this Privacy Policy was last reviewed and is effective as of the date published on the crkiex platform. The governing language for all versions of this Privacy Policy is English. In the event that a translated version is made available for convenience, the English text shall take precedence in all matters of interpretation.
Your Data, Protected
Six Privacy Commitments from crkiex
Every registered player on the crkiex platform benefits from these six concrete data protection practices — applied consistently across every account, every transaction, and every support interaction.
256-bit SSL Encryption
All data in transit between your device and crkiex's servers is protected with 256-bit SSL/TLS encryption. Your login credentials, payment details, and account data are never sent over an unencrypted connection.
Zero Data Selling
crkiex never sells, rents, or trades your personal data to third parties for commercial gain. Your information is shared only with operational partners — such as bKash, Nagad, and KYC providers — strictly to deliver services you've requested.
Minimal Data Collection
We collect only the data that is genuinely necessary for account management, payment processing, identity verification, and responsible gaming monitoring. No superfluous data categories are collected or retained.
Clear Retention Limits
Every category of personal data crkiex holds is subject to a defined retention period. When the retention period expires, data is securely deleted or irreversibly anonymised — it is not held indefinitely.
Exercisable Player Rights
You have the right to access, correct, delete, and restrict processing of your personal data. All rights requests submitted to [email protected] are acknowledged within 5 business days and resolved within 30 calendar days.
Transparent Policy Updates
When crkiex makes material changes to this Privacy Policy, registered players are notified by email at least 30 days before the changes take effect, giving you time to review the update and make an informed decision about your account.
Explore crkiex
Ready to Play on a Platform You Can Trust?
Now that you understand how crkiex protects your data, explore our full range of games — from live cricket betting and BPL wagering to slots, Hi-Lo, and Jacks or Better. Bangladesh's most trusted English-language gaming platform is waiting for you.