1crickex Privacy Policy

1 Data We Collect

1crickex collects personal data in three primary ways: information you provide directly when registering or using the platform, information gathered automatically as you interact with our services, and information received from trusted third-party partners such as payment processors and identity verification services.

1.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you may provide the following categories of personal data:

1.2 Data Collected Automatically

When you visit or interact with the 1crickex platform, our systems automatically record technical and behavioural data including:

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on each page, game sessions started, bets placed, clickstream data, and navigation patterns.
• Session Data: Login timestamps, session duration, logout events, and failed login attempts.
• Cookie Data: See Section 5 for full details on how we use cookies and similar tracking technologies.

1.3 Data Received from Third Parties

We may receive supplementary personal data from third-party partners operating in the following roles:

• Payment Providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Transaction confirmation data, payment reference numbers, and sender account identifiers to reconcile deposits and withdrawals.
• Identity Verification Partners: Confirmation of identity document authenticity and liveness check results in support of our KYC obligations.
• Fraud Prevention Services: Risk scores, device fingerprint signals, and known-fraud indicators used to protect the platform and its users.

2 How We Use Your Data

1crickex uses personal data for specific, documented purposes only. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal information are:

• Account Management: Creating and maintaining your registered player account, authenticating your identity at login, and enabling access to games, sports betting markets, and account features.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payments in Bangladeshi Taka. Verifying that payment accounts are registered in your name in accordance with our same-source withdrawal policy.
• KYC & Regulatory Compliance: Verifying your age (18+), identity, and residential address in Bangladesh as required by our responsible gaming obligations and anti-money laundering (AML) procedures.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, protecting accounts from unauthorised access, identifying multi-accounting, bonus abuse, or collusion, and maintaining the integrity of our games and betting markets.
• Customer Support: Responding to your enquiries, resolving account issues, processing complaints, and communicating platform updates relevant to your account.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve game selection, navigation, and overall user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling and, where our responsible gaming obligations require it, reaching out to offer support, apply deposit limits, or activate cool-off periods.
• Marketing Communications: Where you have given explicit consent to receive promotional communications, sending you information about bonuses, seasonal promotions, new game launches, or BPL / IPL / T20 World Cup betting offers by email or SMS. You may withdraw this consent at any time.

3 Legal Basis for Processing

1crickex processes your personal data under one or more of the following lawful bases depending on the specific purpose of processing:

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting our support team at support@1crickex. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4 Data Sharing & Third Parties

1crickex does not share your personal data with third parties except in the specific, limited circumstances described below. In all cases, data sharing is governed by appropriate data processing agreements and is limited to the minimum information necessary for the stated purpose.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and international card networks Visa and Mastercard. These providers receive only the transaction-specific information required to process your payment and are contractually prohibited from using it for any other purpose.

4.2 Identity Verification & KYC Partners

KYC document review and liveness verification may be carried out with the assistance of specialist third-party identity verification services. These partners process your identity documents solely for the purpose of verifying your eligibility to hold a player account and are bound by strict confidentiality and data security obligations.

4.3 Fraud Prevention & Security Providers

We work with fraud detection and cybersecurity partners to protect the platform and its users. These partners may receive device fingerprint data, IP address information, and behavioural signals. They do not receive your financial data or KYC documents.

4.4 Game Content Providers

Live casino and slot games delivered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi are rendered via embedded iframes or secure APIs. These providers may receive your session token and in-game event data as necessary to deliver the game experience. They do not receive your full identity or payment data.

4.5 Legal & Regulatory Disclosure

1crickex may disclose personal data to law enforcement authorities, financial intelligence units, or regulatory bodies where required to do so by a valid court order, legal process, or applicable law. In such cases, we disclose only the specific data required by the legal obligation and will, where legally permitted, notify the affected user.

4.6 Business Transfers

In the event that 1crickex undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the successor entity as part of the transaction. In such circumstances, players will be notified in advance and the successor entity will be required to honour the commitments set out in this Privacy Policy.

5 Cookies & Tracking Technologies

1crickex uses cookies and similar technologies to operate the platform, maintain your session, remember your preferences, and analyse aggregate usage patterns. Below is a full breakdown of the cookie categories we use.

1crickex does not use third-party advertising cookies, social media tracking pixels, or retargeting technologies. You will not see 1crickex-related advertisements following you across other websites as a result of cookies placed by this platform.

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies will impair your ability to use core platform features including account login, game play, and payment processing.

6 Data Retention

1crickex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active account relationship with 1crickex. This includes identity data, contact data, and account history.
• KYC Documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction — whichever is later — in accordance with standard anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction logs, deposit and withdrawal records, and payment references are retained for a minimum of 5 years following each transaction date.
• Responsible Gaming Records: Self-exclusion requests, deposit limit settings, and problem gambling intervention records are retained for the duration of the exclusion period plus a further 5 years to prevent re-registration during active exclusion periods.
• Support Communications: Live chat transcripts and email correspondence with our support team are retained for 3 years from the date of the last communication.
• Analytics Data: Anonymised aggregate usage data may be retained indefinitely as it cannot be linked back to any individual user.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Deletion requests submitted by users (see Section 7) will be actioned promptly, subject to any legal retention obligations that require us to keep specific data for a longer period.

7 Your Privacy Rights

As a registered player on 1crickex, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team in writing at support@1crickex. We will acknowledge your request within 5 business days and action it within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 1crickex holds about you. We will provide this in a structured, machine-readable format upon verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly via your account profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request that 1crickex delete your personal data. We will honour this request where no legal obligation requires us to retain the data. Please note that KYC and financial records may be subject to mandatory retention periods as described in Section 6.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a portable format so that you may transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be required to continue processing where compelling legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8 Data Security

1crickex takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

8.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the 1crickex platform is encrypted using Transport Layer Security (TLS). Our platform enforces HTTPS at all times and does not permit unencrypted HTTP connections.
• Encrypted Data Storage: Sensitive data fields including passwords, financial details, and KYC document references are stored using strong encryption at rest. Passwords are never stored in plain text.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all access is logged and audited.
• Intrusion Detection: Our systems are monitored 24/7 using automated intrusion detection tools. Suspicious access patterns trigger immediate alerts and investigation.
• Regular Security Audits: 1crickex conducts periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses in our infrastructure before they can be exploited.

8.2 Organisational Safeguards

• All staff and contractors with access to player data are bound by confidentiality obligations and receive regular data protection training.
• Data processing agreements are in place with all third-party service providers that handle personal data on behalf of 1crickex.
• A data breach response plan is maintained and tested regularly. In the event of a data breach that poses a risk to your rights, affected players will be notified without undue delay.

8.3 Your Role in Account Security

While we implement robust security measures on our side, you also play an important role in keeping your account secure. You are responsible for:

• Choosing a strong, unique password for your 1crickex account and not reusing it on other websites or applications.
• Keeping your login credentials strictly confidential. 1crickex will never ask for your password by email, live chat, SMS, or phone call. Any such request should be treated as fraudulent and reported to us immediately.
• Logging out of your account after each session, particularly when using a shared or public device.
• Notifying our support team immediately if you suspect that your account has been accessed without your authorisation.

9 Contact & DPO

If you have any questions, concerns, or complaints about this Privacy Policy, the way 1crickex handles your personal data, or any aspect of our data protection practices, please contact us using the details below. Our data protection team responds to enquiries 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

Privacy & Data Protection Enquiries:
Email (plain text — not a link): support@1crickex
Subject line: Privacy Policy Enquiry or Data Rights Request

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days — in which case we will inform you of the extension and its reason before the initial 30-day deadline.

1crickex reserves the right to update this Privacy Policy from time to time. When material changes are made, we will update the Effective Date displayed at the top of this page and, where the change significantly affects your rights, send a notification to your registered email address. Continued use of the platform following any update constitutes acceptance of the revised Policy. We recommend checking this page periodically to stay informed about how we protect your data.