crekex Privacy Policy

01 Who We Are

crekex is an online casino and sports betting platform accessible at crekex.biz, serving adult players in Bangladesh. In the context of this Privacy Policy, "crekex", "we", "us", and "our" refer to the operator of the crekex platform and all associated services delivered through crekex.biz.

We act as the data controller in respect of all personal data collected from you when you register an account, use platform features, or communicate with our support team. This means we are responsible for deciding how and why your personal data is processed.

If you have any questions about how crekex handles your personal data, or if you wish to exercise any of the rights described in this policy, please contact us at: [email protected] (plain text — not a clickable link).

02 Data We Collect

crekex collects the following categories of personal data from players and platform visitors:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where strictly required by applicable law or regulatory obligation.

03 How We Collect Data

crekex collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to platform surveys or promotions.
• Automated technologies: Technical and usage data collected automatically when you access crekex.biz, through cookies, server logs, session tracking, and similar technologies. See Section 8 for full details.
• Payment processors: Confirmation data received from bKash, Nagad, Rocket, or Upay when a deposit or withdrawal transaction is completed. crekex receives only the information necessary to reconcile your account — we do not receive your full mobile wallet password or PIN.
• Third-party game providers: Game round data, session data, and technical logs received from game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi when you play games hosted on or integrated into the crekex platform.
• Publicly available sources: In limited circumstances, and only where permitted by applicable law, crekex may supplement your account data with information obtained from publicly available sources for fraud prevention or identity verification purposes.

04 How We Use Your Data

crekex uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your crekex player account, including processing your registration, verifying your identity and age, and managing your account settings and preferences.
• Transaction processing: To process deposits via bKash, Nagad, Rocket, and Upay; to process withdrawal requests to your registered payment wallet; and to maintain accurate financial records of all transactions on your account.
• Platform delivery: To provide access to casino games, sports betting markets (including cricket BPL, T20 World Cup, IPL, and other events), and all other crekex platform features and services.
• Customer support: To respond to your enquiries, complaints, and support requests in a timely and effective manner, and to maintain records of our communications for quality and training purposes.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multi-accounting, and other prohibited conduct as described in the crekex Terms and Conditions.
• Regulatory compliance: To fulfil our obligations under applicable law, including Know Your Customer (KYC) verification, anti-money-laundering (AML) checks, and record-keeping requirements.
• Responsible gaming: To monitor player behaviour and apply responsible gaming tools — including deposit limits, session reminders, and self-exclusion — where required or requested, in line with our Responsible Gaming Policy.
• Platform improvement: To analyse usage patterns, game performance, and user experience data in order to improve the crekex platform, optimise page load times, and develop new features.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about new games or features available on crekex. You may withdraw this consent at any time by contacting [email protected].

05 Legal Basis for Processing

crekex processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — that is, to operate your crekex account, process transactions, and deliver platform services. Without this processing, we cannot provide the services you have requested.
• Legal obligation: Processing that is required in order to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and statutory record-keeping requirements.
• Legitimate interests: Processing that is necessary for crekex's legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and internal analytics to improve our services.
• Consent: Processing that is based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

crekex does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: We share the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data processed within their systems.
• Game providers: We share account session data with integrated game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) as required for game delivery and game-round validation. Game providers receive only the data required for these technical purposes.
• Service providers: We engage trusted third-party service providers to assist with platform hosting, data storage, analytics, security monitoring, and customer support tooling. These providers process data solely on our instructions and are contractually prohibited from using your data for any other purpose.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or regulatory directive.
• Business transfers: In the event that crekex undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer in accordance with applicable law.

07 International Data Transfers

The crekex platform serves players in Bangladesh, and we endeavour to process and store data within appropriate jurisdictions wherever possible. However, some of our service providers, game providers, and infrastructure partners may be located in other countries. Where personal data is transferred outside Bangladesh, crekex takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.

Such safeguards may include contractual clauses that impose data protection obligations on the recipient, technical security measures, and access restrictions. If you have questions about the safeguards applicable to any specific international data transfer, please contact us at [email protected].

08 Cookies and Tracking

crekex uses cookies and similar tracking technologies on the crekex.biz platform. Cookies are small text files placed on your device by your browser when you visit a website. We use the following categories of cookies:

• Essential cookies: These cookies are strictly necessary for the operation of crekex.biz. They maintain your login session, remember your account preferences, and ensure security features function correctly. These cookies cannot be disabled without preventing you from using core platform features.
• Analytics cookies: These cookies collect anonymised data about how players interact with crekex.biz — including which pages are most visited, session duration, and game engagement metrics. This data is used solely to improve platform performance and user experience.
• Functional cookies: These cookies remember choices you have made — such as your preferred language or display settings — to provide a more personalised experience on your next visit.
• Security cookies: These cookies help crekex detect and prevent fraudulent activity, including bot traffic, credential stuffing, and session hijacking attempts.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse all or certain categories of cookies, or to delete cookies that have already been set. Please note that disabling essential cookies will impair your ability to log in and use the crekex platform. Disabling analytics or functional cookies will not prevent you from accessing the platform but may affect your experience.

crekex does not use advertising or retargeting cookies that track your activity across third-party websites.

09 Data Retention

crekex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to meet regulatory record-keeping requirements applicable to gambling operators.
• Financial transaction records: Retained for a minimum of seven years following the date of the relevant transaction, in line with financial record-keeping obligations.
• KYC and verification documents: Retained for a minimum of five years following account closure or the date of the last verification check, whichever is later.
• Customer support communications: Retained for a minimum of three years following the resolution of the relevant support case, for quality assurance and dispute resolution purposes.
• Technical and usage logs: Typically retained for up to 12 months on active systems, after which they may be archived for a further period for security and audit purposes.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Your Rights

As a player whose personal data is processed by crekex, you have the following rights in relation to your data. To exercise any of these rights, please submit a written request to [email protected].

• Right of access: You have the right to request a copy of the personal data crekex holds about you, along with information about how it is being used. We will respond to verified access requests within a reasonable timeframe.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal obligations to retain certain data for regulatory purposes.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may have the right to receive your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, receipt of marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling for direct marketing purposes.

crekex will respond to all valid data rights requests as promptly as possible. In some cases, we may need to verify your identity before fulfilling a request in order to protect your data from unauthorised disclosure.

11 Children's Privacy

The crekex platform is strictly for adults aged 18 and above. crekex does not knowingly collect, process, or retain personal data from any individual under the age of 18. Age verification is performed as part of the account registration process, and crekex reserves the right to request additional proof of age at any time.

If crekex becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately, any balance will be handled in accordance with the crekex Terms and Conditions, and the personal data will be deleted from our systems as promptly as practicable.

If you are a parent or guardian and have reason to believe that a minor has registered or is using a crekex account, please contact us immediately at [email protected]. We take underage gambling prevention very seriously and will investigate all such reports promptly.

12 Security Measures

crekex implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS encryption: All data transmitted between your device and crekex.biz is encrypted using Transport Layer Security (TLS) protocols. This ensures that your login credentials, account data, and payment information cannot be intercepted in transit.
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. crekex staff are unable to view or recover your password in plain text. If you forget your password, a reset process is available via your registered mobile number.
• Access controls: Access to personal data held by crekex is restricted to authorised personnel on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations.
• Fraud monitoring: crekex operates automated systems that monitor account activity for signs of fraudulent behaviour, credential stuffing, and unauthorised access attempts. Suspicious activity triggers immediate review and, where warranted, account suspension pending investigation.
• Regular security reviews: crekex conducts periodic reviews of its data security practices and infrastructure to identify and address vulnerabilities. Our platform is tested against known security threats on a regular basis.

While crekex takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, contact us immediately at [email protected] and we will take prompt action to secure your account.

13 Third-Party Links

The crekex platform may contain references to or integrations with third-party services, including game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment partners (bKash, Nagad, Rocket, Upay). These third parties operate under their own privacy policies, which are independent of this crekex Privacy Policy.

crekex is not responsible for the data practices of any third-party service provider, and we encourage you to review the privacy policies of any third party whose services you access in connection with the crekex platform. Our inclusion of a reference to a third-party provider does not constitute an endorsement of that provider's privacy or data security practices.

14 Amendments to This Policy

crekex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made to this policy, we will notify registered players by posting a notice on the crekex platform or by sending a notification to the mobile number or email address associated with your account.

The updated Privacy Policy will take effect from the date specified in the notification, which will be no less than seven (7) days after the notice is posted, except where immediate changes are required for legal or security reasons.

Your continued use of the crekex platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. The version of this Privacy Policy published at crekex.biz/privacy-policy at any given time is the current, operative version.

15 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which crekex handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Platform: crekex.biz
• Operating hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

crekex aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 business days. For complex requests, we will keep you informed of progress throughout the review period.

If you are not satisfied with crekex's response to a privacy complaint, you may escalate the matter to crekex's senior management team by stating in your follow-up email that you wish to escalate. We will treat escalated privacy complaints with priority and provide a final written response within 14 additional business days of escalation.