crikeax Privacy Policy

crikeax collects personal data through several channels: directly from you during account registration and subsequent use of the platform, automatically through the use of cookies and tracking technologies, and from third-party service providers where legally permitted. The categories of personal data we collect are set out in the table below.

1.1 Data You Provide Voluntarily

The majority of personal data crikeax holds about you is provided directly by you during the registration process, when updating your account profile, when contacting customer support, or when participating in promotional activities such as tournaments or bonus campaigns. Providing accurate and up-to-date information is a condition of maintaining an active crikeax account.

1.2 Data Collected Automatically

When you visit the crikeax website or use the platform, our systems automatically collect certain technical and behavioural data. This includes your IP address, the pages you visit, the duration of your session, the device and browser you are using, and the sequence of actions you take within the platform. This data is used primarily for security monitoring, fraud detection, platform performance analysis, and — where you have consented — personalisation of your experience.

1.3 Data from Third Parties

crikeax may receive limited personal data about you from authorised third parties, including:

• Payment processors such as bKash, Nagad, Rocket, and Upay — for the purpose of confirming transaction status
• Identity verification service providers used during the KYC process
• Fraud prevention and anti-money laundering screening services
• Game providers such as Pragmatic Play, Evolution Gaming, and Spribe — limited to game session data necessary for dispute resolution

crikeax does not purchase personal data lists from data brokers or third-party marketing companies.

crikeax does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third-party service providers with whom crikeax shares personal data are required to maintain appropriate data-protection standards through contractual obligations.

3.1 Payment Service Providers

To process your deposits and withdrawals, crikeax shares relevant financial and identity data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank. The data shared is limited to what is technically required to complete the transaction. Each payment provider operates under its own privacy policy and applicable financial regulations.

3.2 Identity Verification Partners

During the KYC process, your identity documents and associated personal data may be shared with an authorised identity verification service provider. These providers process your data solely on crikeax's behalf and under strict contractual data-processing terms. They are not permitted to use your data for any independent purpose.

3.3 Game Providers

To deliver casino and slot games — including titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe — limited session-level data (such as a pseudonymous player identifier, stake amount, and game result) is transmitted to the respective game provider's servers. Game providers do not receive your name, email address, or payment details through this process.

3.4 Legal and Regulatory Authorities

crikeax may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a regulatory direction. Where permitted by law, crikeax will notify you of such a disclosure in advance. In cases involving active fraud investigations or national security matters, advance notification may not be possible.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the crikeax business, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. crikeax will notify affected players by email prior to any such transfer and will ensure that the receiving entity commits to data-protection standards at least equivalent to those set out in this Privacy Policy.

crikeax takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. While no system can guarantee absolute security, crikeax maintains a robust data security programme that is reviewed and updated on a regular basis.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data in transit between your device and the crikeax platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the crikeax website.
• Encryption at Rest: Sensitive personal data stored on crikeax servers — including identity documents, financial records, and account credentials — is encrypted at rest using strong encryption algorithms.
• Two-Factor Authentication: crikeax offers two-factor authentication (2FA) for all player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised. We strongly encourage all crikeax players to activate 2FA.
• Intrusion Detection: crikeax employs automated intrusion detection and prevention systems that continuously monitor platform traffic for anomalous patterns indicative of an attack or data breach attempt.

5.2 Organisational Safeguards

Access to personal data within the crikeax organisation is governed by a strict role-based access control policy. Only personnel who require access to personal data to perform their job functions are granted that access, and all such personnel are trained in data protection best practices. Access logs are maintained and reviewed regularly.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, crikeax will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence. crikeax maintains a formal data breach response procedure that is tested and updated annually.

5.4 Your Responsibility

You are responsible for keeping your crikeax account credentials confidential and for ensuring that your registered email address and mobile number remain under your exclusive control. crikeax will never ask you for your password through any channel. If you receive a communication purporting to be from crikeax that asks for your password or sensitive payment details, treat it as a phishing attempt and report it to the crikeax support team immediately.

As a crikeax player, you hold meaningful rights over the personal data we hold about you. crikeax is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the crikeax support team via 24/7 live chat from your account dashboard, or by email at [email protected].

7.1 Right of Access

You have the right to request a copy of the personal data that crikeax holds about you, together with information about the purposes for which it is processed, the categories of data held, and any third parties with whom it has been shared. crikeax will respond to a valid access request within a reasonable period, typically within 30 days of receiving a complete request.

7.2 Right to Rectification

If any of the personal data crikeax holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as your contact number or email address, you may update these directly through your crikeax account settings. For changes to core identity data (name, date of birth), documentary evidence will be required and the change will be processed following verification.

7.3 Right to Erasure

You may request that crikeax delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that crikeax is required to retain certain categories of data — particularly financial records and KYC documents — for legally mandated periods even after your account is closed, and deletion requests cannot override these obligations.

7.4 Right to Restrict Processing

You have the right to request that crikeax restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested, or while you await the outcome of an objection to processing based on legitimate interest. Where processing is restricted, crikeax will continue to store your data but will not actively use it until the restriction is lifted.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You can withdraw your consent for marketing communications by updating your notification preferences in your crikeax account settings or by contacting the support team. Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

7.6 Right to Data Portability

Where crikeax processes your personal data on the basis of your consent or for the performance of a contract, and where the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another service provider where technically feasible.