crexkex Privacy Policy

01 Data We Collect

crexkex collects personal data from players in several ways: directly when you register an account or interact with our platform, automatically through your use of the site, and occasionally from trusted third-party sources such as identity verification providers. The categories of data we collect are set out below.

1.1 Registration and Account Data

When you create a crexkex account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 18 or above)
• Email address
• Mobile phone number
• Country and residential address
• Preferred currency (BDT — Bangladeshi Taka)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to confirm player eligibility, crexkex may collect the following identity documents and biometric information during our Know Your Customer (KYC) process:

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement dated within three months)
• Selfie photograph or video for liveness verification
• Payment method documentation (screenshot of bKash or Nagad wallet, bank statement)

1.3 Financial Transaction Data

We collect records of all financial activity conducted through your crexkex account, including deposit amounts and timestamps, withdrawal requests and processing status, payment method identifiers (masked card numbers, mobile money wallet references for bKash, Nagad, Rocket, and Upay), bonus credits and wagering activity, and account balance history.

1.4 Gameplay and Betting Data

crexkex records all betting and gaming activity associated with your account, including sports bets placed, game sessions played, stake amounts, game outcomes, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

1.5 Technical and Device Data

When you visit crexkex.net or use the crexkex mobile application, we automatically collect certain technical information, including:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps, page views, and navigation paths
• Referring URL (the page that directed you to crexkex.net)

1.6 Communications Data

We retain records of communications between you and the crexkex support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through our support channels. These records are retained for quality assurance, dispute resolution, and training purposes.

02 How We Use Your Data

crexkex uses the personal data we collect for specific, legitimate, and transparent purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we process your personal data are set out below.

Purpose	Data Categories Used
Account creation and management	Registration data, KYC documents
Processing deposits and withdrawals	Financial transaction data, KYC documents
Providing sports betting and casino games	Account data, gameplay data
Identity verification and fraud prevention	KYC documents, technical data, financial data
Responsible gaming monitoring	Gameplay data, session data, account data
Customer support and dispute resolution	Communications data, account data, transaction data
Platform security and abuse prevention	Technical data, IP data, device identifiers
Regulatory compliance and AML reporting	All categories as required by applicable law
Platform analytics and performance improvement	Technical data, anonymised gameplay data
Personalised promotions (with consent)	Account data, gameplay data, communication preferences

2.1 Marketing Communications

With your consent, crexkex may send you promotional communications about new games, bonus offers, seasonal promotions (such as those tied to BPL cricket season, Eid, or Pohela Boishakh), and platform updates. You may withdraw your consent to receive marketing communications at any time by updating your account notification preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Automated Decision-Making

crexkex uses automated systems to detect and prevent fraud, bonus abuse, and problem gambling patterns. In some cases, these automated processes may result in account restrictions being applied without prior manual review. Where a significant decision affecting your account is made solely through automated processing, you have the right to request a manual review by a member of the crexkex compliance team. To exercise this right, contact [email protected] with the subject line "Manual Review Request."

03 Legal Basis for Processing

crexkex processes your personal data on one or more of the following legal bases, consistent with internationally recognised data protection standards:

• Contractual necessity: Processing required to create and manage your crexkex account, execute transactions, and deliver the betting and gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money-laundering regulations, identity verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out to protect the security and integrity of the crexkex platform, prevent fraud, ensure responsible gaming compliance, and improve our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — including the sending of personalised marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting prior processing.

04 Data Sharing & Disclosure

crexkex does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of trusted recipients where necessary to operate the platform and fulfil our legal obligations:

4.1 Payment Service Providers

To process deposits and withdrawals, crexkex shares relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card networks Visa and Mastercard. These providers receive only the data necessary to process your specific transaction and are bound by their own privacy and security obligations.

4.2 Identity Verification Providers

crexkex works with third-party KYC and identity verification providers to validate the documents you submit during the account verification process. These providers process your identity documents on our behalf under strict data processing agreements and are not permitted to use your data for any purpose other than verification.

4.3 Game Software Providers

Live casino games streamed from studios operated by Evolution Gaming and Ezugi may involve the transmission of gameplay session data to those providers' servers. Slot games and other RNG titles provided by studios including Pragmatic Play, NetEnt, Microgaming, and Spribe operate under their own data handling arrangements, which are governed by contractual agreements with crexkex.

4.4 Fraud Prevention and Security Services

crexkex may share technical data — including IP addresses, device fingerprints, and behavioural signals — with fraud detection and cybersecurity service providers to protect the platform and its players from unauthorised access, account takeover attempts, and financial crime.

4.5 Legal and Regulatory Disclosure

crexkex may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law, court order, or to protect the rights, property, or safety of crexkex, its players, or the public. We will notify you of such disclosures wherever legally permitted to do so.

05 Cookies & Tracking

crexkex uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and analyse how the site is used. This section explains the types of cookies we use and your options for managing them.

5.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, load balancing, security tokens, and core platform functionality. These cannot be disabled without breaking the site.	Session / up to 24 hours
Functional	Remember your language preference, display settings, and last-visited game category to personalise your experience on return visits.	Up to 90 days
Analytics	Collect anonymised data on page views, session duration, and navigation paths to help us understand how players use the platform and identify areas for improvement.	Up to 13 months

5.2 What We Do Not Use

crexkex does not deploy third-party advertising cookies, cross-site tracking pixels, social media retargeting scripts, or any cookie technology designed to build a profile of your browsing behaviour outside of crexkex.net.

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict third-party cookies, or be notified when a cookie is set. Please be aware that disabling strictly necessary cookies will affect the functionality of the crexkex platform and may prevent you from logging in or accessing certain features. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser manufacturer.

06 Data Security

crexkex employs a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security programme includes the following measures:

• Transport security: All data in transit between your browser or app and the crexkex servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Data at rest: Personal data stored in crexkex databases is encrypted using AES-256 encryption. Database access is restricted to authorised personnel only, with full audit logging of all access events.
• Password security: Player passwords are stored using bcrypt hashing with a unique salt per account. crexkex staff cannot view your plain-text password and will never ask for it.
• Access controls: Internal access to player data is governed by a strict role-based access control (RBAC) policy. Only personnel with a legitimate need to access specific data categories are granted the corresponding permissions.
• Infrastructure security: The crexkex platform is hosted on hardened cloud infrastructure with firewalls, intrusion detection systems, and regular vulnerability scans. Security patches are applied on a defined maintenance schedule.
• Penetration testing: crexkex engages independent security firms to conduct periodic penetration testing of the platform to identify and remediate vulnerabilities before they can be exploited.
• Employee training: All crexkex staff who handle personal data receive regular data protection and cybersecurity awareness training.

07 Data Retention

crexkex retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following retention schedule applies to the main categories of data we hold:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal obligation / AML compliance
KYC verification documents	Duration of account + 5 years after closure	Legal obligation / AML compliance
Financial transaction records	7 years from transaction date	Legal obligation / financial record-keeping
Gameplay and betting history	Duration of account + 2 years after closure	Legitimate interests / dispute resolution
Support communications	3 years from last interaction	Legitimate interests / quality assurance
Technical and device data (logs)	13 months on a rolling basis	Legitimate interests / security
Marketing consent records	Until consent is withdrawn + 1 year	Consent / legal accountability
Self-exclusion records	Permanently retained (permanent exclusions)	Responsible gaming obligation

Upon expiry of the applicable retention period, crexkex will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

08 Your Privacy Rights

As a crexkex player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact the crexkex support team via live chat or email at [email protected] with the subject line "Data Rights Request." We will respond to all valid requests within 30 calendar days.

8.1 Right of Access

You have the right to request a copy of the personal data crexkex holds about you. We will provide this in a structured, commonly used format. We may ask you to verify your identity before fulfilling an access request.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For simple corrections such as email address or phone number changes, you may also update your account details directly through your account settings.

8.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that this right is subject to our legal obligations to retain certain data categories (such as AML records and financial transaction logs) for defined statutory periods. We will inform you of any retention obligations that prevent full erasure at the time of your request.

8.4 Right to Restriction of Processing

You may request that crexkex restricts the processing of your personal data in specific circumstances, such as while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction over erasure.

8.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format (such as JSON or CSV) and to transfer it to another service provider.

8.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for personalised promotion purposes. You may also withdraw consent to marketing communications at any time through your account notification settings.

8.7 Rights Related to Automated Decision-Making

Where crexkex makes a significant decision about your account through solely automated means (such as automatic account restriction following fraud detection), you have the right to request human review of that decision. Contact [email protected] to submit a review request.