Privacy Policy — ccrickex
Your privacy is a core commitment at ccrickex. This policy explains exactly what personal data we collect from players across Bangladesh, why we collect it, how we use it, and the rights you hold over your own information.
This Privacy Policy ("Policy") describes how ccrickex ("the Operator", "we", "us", or "our") collects, processes, stores, and shares personal information provided by or collected about players ("you" or "the Player") who access or use the ccrickex platform (the "Platform"). This Policy forms part of the overall legal agreement between ccrickex and every registered Player and should be read together with the ccrickex Terms & Conditions.
By registering an account on ccrickex, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.
SSL Encryption on Every Page
All data exchanged between your device and the ccrickex Platform is encrypted using industry-standard SSL/TLS protocols. Your BDT balance, NID details, and payment method information are never transmitted in plain text.
No Sale of Personal Data
ccrickex does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is shared only with the service providers strictly necessary to operate the Platform and fulfil our legal obligations.
One-Account Data Principle
Because ccrickex enforces a strict one-account-per-player rule, all personal data collected is tied to a single verified identity. This protects you against duplicate account fraud and strengthens account recovery processes.
Mobile-First Data Practices
The majority of ccrickex players in Dhaka, Chittagong, Sylhet, and across Bangladesh access the Platform via mobile device. Our data collection practices are designed with mobile contexts in mind — minimal data collected, maximum security applied.
KYC Handled Securely
Identity documents submitted for KYC verification (National ID, passport) are stored in an encrypted document vault with access restricted to authorised verification staff only. Documents are deleted once verification is complete and the retention period has elapsed.
Opt-Out of Marketing Emails
Every promotional email sent by ccrickex includes a clear English-language unsubscribe link. Players may also manage their marketing preferences directly in their account settings at any time, with changes taking effect within 48 hours.
1. Data We Collect
ccrickex collects personal data through several means: directly from you when you register an account or contact support, automatically when you use the Platform, and from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are described below.
Registration & Account Data
- Full legal name as it appears on your National Identity Card (NID)
- Date of birth (used to verify the 18+ age requirement)
- Mobile phone number registered with your mobile financial service (bKash, Nagad, Rocket, or Upay)
- Email address
- Username and hashed (never plain-text) password
- Residential city or division in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
Identity Verification (KYC) Data
- Scanned copy or photograph of National ID Card (NID), passport, or other government-issued photo identification
- Selfie photograph where required for liveness verification
- Bank account or mobile financial account details used for withdrawal (account number / bKash / Nagad / Rocket number)
Transaction Data
- Deposit amounts, dates, and payment method references
- Withdrawal amounts, dates, and destination account references
- BDT balance history and bonus wallet activity
- Bet history: stakes placed, markets selected, odds accepted, outcomes, and net win/loss records
Technical & Device Data
- IP address at the time of login and each session
- Device type, operating system, and browser version
- Session timestamps and duration
- Geolocation data (country and city level only, derived from IP address)
Communication Data
- Contents of support requests submitted via email to support@ccrickex
- Live chat transcripts where live chat is available
- Records of any formal complaint or dispute submitted to the Operator
Data Minimisation Principle
ccrickex collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive categories of data (such as racial or ethnic origin, religious beliefs, or health information) unless specifically required by law or for responsible gaming purposes (e.g., self-exclusion history).
2. How We Use Your Data
ccrickex processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the legal basis for each category of processing.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, mobile number, username | Performance of contract |
| Age verification (18+ requirement) | Date of birth, NID document | Legal obligation; responsible gaming |
| Processing deposits and withdrawals | Payment method details, transaction records | Performance of contract |
| Anti-money laundering (AML) checks | Transaction history, KYC documents, source of funds | Legal obligation |
| Fraud detection and account security | IP address, device data, login history | Legitimate interests |
| Responsible gaming monitoring | Bet history, deposit patterns, self-exclusion records | Legal obligation; legitimate interests |
| Customer support | Communication data, account data | Performance of contract |
| Marketing communications (opt-in only) | Email address, game preferences | Consent |
| Platform improvement and analytics | Aggregated, anonymised usage data | Legitimate interests |
ccrickex does not use your personal data for automated decision-making that produces significant legal effects on your account, except in cases of fraud detection where account suspension may be triggered automatically pending human review. You have the right to request human review of any automated decision that affects your account.
Marketing Communications
ccrickex sends promotional emails and SMS notifications only to players who have explicitly opted in during registration or in their account settings. You may withdraw marketing consent at any time by using the unsubscribe link in any email or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.
4. Sharing Your Information
ccrickex does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific, limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.
Service Providers
We engage trusted third-party service providers who process personal data on our behalf, under strict data processing agreements that prohibit them from using your data for any purpose beyond the service they provide to us. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, and partner banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the transaction data necessary to process your deposits and withdrawals.
- Identity verification providers: KYC document verification may be handled by a specialist provider operating under confidentiality obligations. Your NID or passport data is transmitted securely and is not retained by the provider beyond the verification session.
- Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO, and Spribe receive a pseudonymous player identifier and your active bet data necessary to run each game. They do not receive your full name, NID, or payment details.
- Cloud infrastructure providers: The Platform is hosted on secure cloud infrastructure. Server-level access to encrypted data stores is strictly controlled and audited.
Legal & Regulatory Disclosure
ccrickex may disclose personal data to competent authorities, regulators, or law enforcement agencies where required by applicable law, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.
Business Transfers
In the event that ccrickex undergoes a corporate restructuring, merger, or acquisition, player personal data may be transferred to the acquiring entity as part of that transaction. Any acquirer will be bound by the terms of this Privacy Policy with respect to data collected prior to the transfer, and registered players will be notified of any material change in data controller.
No Data Sales — Ever
ccrickex's business model is built on player trust. We do not monetise player data by selling it to advertisers, data brokers, or analytics companies. Your personal information is used exclusively to operate your account and deliver the services you have requested.
5. Data Retention Periods
ccrickex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML / legal compliance |
| KYC identity documents | 5 years from date of submission | Regulatory obligation |
| Transaction records | 7 years from transaction date | Financial record-keeping |
| Bet history | 5 years from bet settlement date | Dispute resolution; responsible gaming |
| Support communications | 3 years from last contact | Customer service continuity |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent |
| Session / IP logs | 12 months from session date | Fraud detection; security auditing |
| Self-exclusion records | Permanent (never deleted) | Responsible gaming protection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for internal analytics purposes.
6. Your Privacy Rights
As a registered player on ccrickex, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at support@ccrickex with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a verified request.
Right of Access
You may request a copy of all personal data we hold about you, including your account data, transaction records, and bet history.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Changes to NID-verified data require re-submission of supporting documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
Right to Data Portability
You may request a structured, machine-readable export of personal data you have provided to ccrickex, such as your account registration information and transaction history.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests.
How to Submit a Privacy Rights Request
Email your request (plain text — this address is not a clickable link) to: support@ccrickex. Include your registered username, the right you wish to exercise, and a brief description of your request. We may ask you to verify your identity before processing the request to protect against unauthorised access to another player's data.
7. Data Security Measures
ccrickex applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, our measures represent current industry best practice for online gaming platforms serving the Bangladesh market.
Technical Controls
- SSL/TLS Encryption in Transit: All communications between your device and our servers are encrypted using a minimum of TLS 1.2. This applies to the login page, account pages, payment pages, and the game lobby.
- Encryption at Rest: Personal data stored in our databases — including NID information, payment records, and KYC documents — is encrypted at rest using AES-256 encryption.
- Password Security: Player passwords are never stored in plain text. We use a strong, salted hashing algorithm so that even in the event of a database breach, raw passwords cannot be recovered.
- Access Controls: Access to player personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality agreements.
- Intrusion Detection: The Platform operates automated intrusion detection and anomaly monitoring to identify and respond to unusual access patterns in real time.
Organisational Controls
- Regular internal security reviews are conducted to assess and remediate vulnerabilities in the Platform infrastructure.
- Staff involved in data processing receive periodic privacy and security training.
- Third-party service providers are assessed for security compliance before being granted access to player data.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and interests, ccrickex will notify affected players via their registered email address within 72 hours of becoming aware of the breach, to the extent that notification is feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or are taking to mitigate the impact.
Your Role in Data Security
Security is a shared responsibility. Protect your ccrickex account by using a strong, unique password, never sharing your login credentials with anyone, and logging out after each session, especially on shared devices. If you suspect your account has been accessed without your authorisation, contact support immediately at support@ccrickex.
8. Updates to This Policy
ccrickex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by sending a notice to their registered email address at least 14 days before the revised Policy comes into effect.
The effective date at the top of this page indicates when the current version of the Policy was last updated. We encourage you to review this Policy periodically. Your continued use of the ccrickex Platform following the effective date of any updated Policy constitutes your acceptance of the changes.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data ccrickex holds about you, please contact our support team. English-language support is available daily from 08:00 to 00:00 BST (UTC+6). Contact email (plain text — not a clickable link): support@ccrickex
Policy Change Notifications
Material changes to this Privacy Policy are communicated to registered players via email at least 14 days in advance. Minor clarifications that do not affect the substance of data processing (e.g., formatting corrections, broken link fixes) may be applied without advance notice. The version history of this Policy is available on request from support.
Ready to Play Securely?
Your data is protected. Your identity is verified. Your BDT balance is encrypted. Explore the full ccrickex game library — cricket betting, live casino, slots, and more. 18+ only. Please gamble responsibly.