Privacy Policy

criecex operates the online casino and sports betting platform accessible at criecex.net. For the purposes of this Privacy Policy, criecex acts as the data controller in respect of all personal data collected from players and visitors based in Bangladesh. As data controller, criecex determines the purposes for which personal data is collected and the manner in which it is processed.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data-related concern, you may contact the criecex data team at the following address:

Contact: support at criecex.net
Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)
Response Time: Under 2 business hours for standard queries; up to 5 business days for formal data rights requests.

This Privacy Policy applies to all personal data collected through the criecex website, mobile-optimised interface, customer support channels, and any other service operated by criecex. It should be read alongside the Terms & Conditions and the Responsible Gaming policy, which together form the complete agreement governing your use of the criecex platform.

When you interact with criecex — whether by registering an account, making a deposit, placing a bet, or contacting support — certain personal data is collected. The specific data collected depends on the nature of the interaction. The main categories are described below.

Registration Data

At the point of account registration, criecex collects your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. This data is required to create and identify your account, to verify that you meet the 18+ age requirement, and to facilitate communication with you about your account activity.

Identity Verification (KYC) Data

To comply with responsible gaming standards and to prevent fraud, criecex may request a copy of your National Identity Card (NID) or passport, a proof of address document (such as a utility bill or bank statement issued within the last three months), and — where withdrawal amounts exceed internal thresholds — a source of funds declaration. KYC documents are stored securely and processed solely for the purpose of identity verification.

Financial Transaction Data

When you make a deposit or request a withdrawal, criecex records the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number provided by the payment provider, and the date and time of the transaction. criecex does not store full mobile wallet PINs or bank account passwords.

Gameplay and Betting Data

criecex logs your gaming activity on the platform, including the games played, bet amounts placed, game outcomes, session start and end times, and cumulative account balance movements. This data is used for account integrity, responsible gaming monitoring, and dispute resolution.

Technical and Device Data

When you access criecex, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

criecex uses the personal data it collects strictly for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with the reason it was originally collected. The primary uses of personal data on the criecex platform are as follows:

Account Management and Service Delivery

Personal data is used to create and maintain your criecex account, process your deposits and withdrawals in BDT, authenticate your login sessions, deliver game content, and settle betting markets. Without this processing, the criecex service cannot be provided to you.

Identity and Age Verification

criecex is an 18+ platform. Personal data — particularly the KYC documents you submit — is used to verify that you meet the minimum age requirement and that your identity matches the payment methods associated with your account. This protects both individual players and the integrity of the criecex platform.

Fraud Prevention and Security

Technical data and transaction records are analysed to detect patterns consistent with fraud, money laundering, account takeover, or other prohibited activities. Where a security concern is identified, criecex may suspend an account pending investigation. These measures protect all players on the platform.

Responsible Gaming Monitoring

Gameplay and deposit data is reviewed as part of criecex's responsible gaming programme. Where patterns suggest that a player may be experiencing difficulties with gambling behaviour — such as rapidly escalating deposit frequency or requests to reverse self-exclusion shortly after it is applied — criecex may proactively contact the player or apply protective account restrictions. See the Responsible Gaming page for full details.

Customer Support

When you contact criecex support, the information you provide — including account details, transaction references, and descriptions of your query — is used to investigate and resolve your issue. Support conversations are retained for a period of 24 months to allow follow-up and to support dispute resolution processes.

Platform Improvements

Aggregated, anonymised data derived from player activity is used to improve the criecex platform, including optimising page load times for players in Dhaka, Chittagong, Sylhet, and other regions of Bangladesh, improving game recommendations, and prioritising feature development. This processing does not involve individual player identification.

Marketing Communications

Where you have not opted out of marketing communications, criecex may send you information about promotions, bonuses, seasonal offers (such as Eid and BPL cricket promotions), and platform updates via the mobile number or email address registered on your account. You may opt out of marketing communications at any time by contacting support at criecex.net or by updating your communication preferences within the account settings panel.

In the course of operating the criecex platform, certain personal data is shared with carefully selected third-party service providers. Each such provider is bound by a data processing agreement that requires them to handle player data solely for the purpose specified and in accordance with applicable data protection standards.

Payment Processors

To process your deposits and withdrawals, criecex shares necessary transaction details with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is required to execute the specific transaction — typically your registered mobile number or bank account reference and the transaction amount in BDT.

Identity Verification Partners

KYC document review may be performed by a trusted third-party identity verification service. This provider receives only the documents and data necessary to complete the verification check and is prohibited from using that data for any other purpose.

Game Content Providers

Live casino games and slot content are delivered by certified third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming. These providers may receive a session token and a pseudonymous player identifier to authenticate your game session. They do not receive your full name, NID, or financial account details.

Legal and Regulatory Disclosures

criecex may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, by a valid legal order, or where disclosure is necessary to prevent or detect fraud, money laundering, or other serious criminal activity. criecex will notify the affected player of any such disclosure where it is legally permitted to do so.

Business Transfers

In the event that criecex undergoes a merger, acquisition, or sale of assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer that affects the way their data is processed, and the incoming entity will be required to honour the terms of this Privacy Policy.

criecex uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to gather aggregated analytics about how the platform is used. The types of cookies used on criecex are described below.

Strictly Necessary Cookies

These cookies are essential for the criecex platform to function. They maintain your login session, store your language and currency preferences (BDT), and support security features such as CSRF protection. Without these cookies, core platform features cannot operate. These cookies cannot be disabled.

Analytical Cookies

criecex uses analytical cookies to understand how players navigate the platform — for example, which game categories receive the most visits, where players drop off during the deposit flow, and which pages load most slowly for users in Bangladesh. This data is aggregated and does not identify individual players. You may opt out of analytical cookies by contacting the support team.

Functional Cookies

Functional cookies remember preferences you have set during your session — such as your preferred table stakes in live casino games, or the sports markets you follow most regularly. These cookies improve the continuity of your experience across sessions but are not strictly required for the platform to work.

Managing Cookies

Most modern browsers allow you to view, delete, and block cookies through the browser settings menu. Please note that disabling strictly necessary cookies will impair the criecex login and session functions. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

criecex retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. Once the applicable retention period has elapsed, data is securely deleted or irreversibly anonymised.

Where a legal or regulatory investigation is ongoing at the point that a standard retention period would otherwise expire, criecex may extend retention of the relevant data until the matter is fully resolved. Players will be notified of any such extension where it is legally permissible to do so.

As a player on criecex, you hold a number of rights in respect of your personal data. criecex is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To exercise any of the rights described below, contact the criecex support team at support at criecex.net. Requests are acknowledged within 2 business hours and actioned within 5 business days.

Right of Access

You have the right to request a copy of the personal data criecex holds about you. Upon a valid access request, criecex will provide a structured summary of your data — including registration details, transaction history, gameplay records, and any KYC documents on file — in a readable format.

Right to Correction

If any personal data held by criecex is inaccurate or outdated, you have the right to request that it be corrected. This includes updating your registered mobile number, email address, or residential address. Note that your registered full name and date of birth cannot be changed after KYC verification is complete, as these are identity-verified fields.

Right to Deletion

You may request that criecex delete your personal data. This right is subject to certain limitations — criecex is required to retain some data for legal and regulatory purposes even after account closure (see the Data Retention section above). Where deletion is not possible in full, criecex will inform you of the specific categories of data that must be retained and the reason for retention.

Right to Restrict Processing

In certain circumstances — for example, where you dispute the accuracy of data held, or where you have objected to processing and a decision on that objection is pending — you may request that criecex restrict the processing of your data to storage only, until the matter is resolved.

Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. Once an objection is received, criecex will cease sending marketing communications to you within one business day. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not affected by a marketing opt-out.

Right to Withdraw Consent

Where criecex processes your data on the basis of consent — for example, for certain types of marketing communication — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

criecex applies a range of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, alteration, or disclosure. The principal measures in place are described below.

Encryption in Transit and at Rest

All data transmitted between your browser or device and criecex servers is protected by SSL/TLS encryption. Sensitive data stored on criecex servers — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption protocols.

Access Controls

Internal access to player personal data is governed by a role-based access control policy. Staff members are granted access only to the data categories that are relevant to their designated function. All internal access is logged and subject to periodic review by the criecex security team.

Two-Factor Authentication

criecex supports two-factor authentication (2FA) for player account logins from unrecognised devices, delivered via SMS to the mobile number registered on the account. Players are strongly encouraged to keep their registered mobile number current so that 2FA delivery is not disrupted.

Incident Response

criecex maintains an internal data breach response procedure. In the event of a confirmed data breach that poses a risk to player privacy, criecex will notify affected players via their registered contact details as promptly as practicable, describing the nature of the incident, the data involved, the steps criecex has taken in response, and any actions players should take to protect themselves.

Vendor Security Standards

All third-party service providers that process player data on behalf of criecex — including payment processors, identity verification partners, and game content providers — are required to maintain security standards consistent with those applied by criecex itself. This requirement is embedded in all data processing agreements. criecex does not engage vendors whose security posture it cannot adequately assess.

While criecex takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. If you suspect that your criecex account has been accessed by an unauthorised party, please contact support at criecex.net immediately so that protective measures can be applied to your account without delay.