creckx Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how creckx ("creckx", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who register for and use the creckx online gaming and sports betting platform at creckx.org.

creckx is committed to handling your personal data with transparency, integrity, and respect. We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and security. By creating a creckx account or continuing to use the platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the creckx Terms & Conditions, which govern the overall relationship between you and creckx. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to request account closure.

2. Data We Collect

creckx collects personal data through several channels, including account registration, identity verification, payment processing, gameplay activity, and direct communications with our support team. The categories of data we collect are described below.

2.1 Registration Data

When you create a creckx account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Residential address (including city, district, and postcode within Bangladesh)
• Mobile phone number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and confirm player eligibility, creckx may request:

• A copy of a government-issued photo identification document (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
• Proof of payment method ownership (screenshot of registered bKash, Nagad, or Rocket account; bank statement; or card image)
• Source of funds declaration where required by our compliance procedures

2.3 Financial Transaction Data

For each deposit and withdrawal processed through your creckx account, we record the transaction amount in BDT, the payment method used, the transaction reference number, the date and time of the transaction (in Bangladesh Standard Time, UTC+6), and the resulting account balance.

2.4 Gameplay and Betting Data

creckx records all gameplay and betting activity on the platform, including games played, bet amounts, outcomes, session durations, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

2.5 Technical and Device Data

We automatically collect certain technical data when you access the creckx platform, including your IP address, browser type and version, device type and operating system, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and platform analytics.

2.6 Communications Data

If you contact creckx via live chat, email, or WhatsApp support, we retain records of those communications, including the content of your messages, for a period of five years. These records assist us in resolving disputes and improving customer service quality.

3. How We Use Your Data

creckx uses personal data for the following purposes:

creckx will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by applicable law.

4. Legal Basis for Processing

creckx processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the creckx Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable anti-money-laundering laws, financial record-keeping requirements, and age verification obligations.
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your rights and freedoms.
• Consent: Processing of data for optional purposes, including marketing and promotional communications, where you have given your explicit and freely withdrawable consent.

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Data Sharing

5.1 Third-Party Service Providers

creckx shares personal data with carefully selected third-party service providers who assist us in operating the platform. These providers are contractually bound to process data only on our instructions and to maintain appropriate security measures. Categories of providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard — for processing deposits and withdrawals in BDT.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who operate game servers and RNG infrastructure. These studios receive only the minimum data necessary to deliver gameplay (session token, game outcome records).
• KYC and identity verification providers: Third-party document verification services used to authenticate government-issued ID documents during the KYC process.
• Cloud infrastructure providers: Secure hosting and data storage providers who maintain creckx server infrastructure under strict data processing agreements.
• Fraud prevention services: Specialised security and anti-fraud vendors who analyse transaction patterns to detect suspicious activity.

5.2 Legal Disclosures

creckx may disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of players, or defend our legal rights.

5.3 Business Transfers

In the event that creckx undergoes a merger, acquisition, or sale of substantially all of its assets, personal data held by creckx may be transferred to the acquiring entity. We will provide reasonable notice to affected players before any such transfer takes place and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

5.4 No Data Selling

creckx does not sell, rent, lease, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or any other commercial entity. This commitment is absolute and is not subject to any exception or opt-out mechanism — it simply does not happen.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

creckx uses the following categories of cookies on the platform:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously viewed game categories, to improve your experience across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the creckx platform. This helps us identify areas for improvement. We use privacy-respecting analytics tools and do not share raw analytics data with third parties.

6.2 Third-Party Advertising Cookies

creckx does not deploy third-party advertising cookies, tracking pixels, or retargeting scripts on its platform. We do not participate in cross-site behavioural advertising networks.

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your creckx account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

7. Data Security

creckx implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options for player accounts to reduce the risk of unauthorised access.
• Continuous server monitoring and automated intrusion detection systems.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Role-based access controls ensuring that creckx staff can only access personal data necessary for their specific job function.
• Comprehensive staff data protection training and binding confidentiality obligations for all personnel with access to personal data.

Despite these measures, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights or interests, creckx will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

8. Data Retention

creckx retains personal data for the following periods:

• Active account data: Retained for the duration of your account plus a minimum of five years following account closure, to satisfy financial record-keeping obligations and to enable dispute resolution.
• KYC verification documents: Retained for a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven years following the date of each transaction.
• Customer support communications: Retained for five years from the date of the communication.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked to any individual player.
• Marketing consent records: Retained for the duration of the consent plus three years after withdrawal, as evidence of the lawful basis for communications sent.

When the applicable retention period has expired, creckx will securely delete or anonymise the relevant personal data in accordance with our internal data destruction procedures.

9. Your Rights

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data that creckx holds about you:

• Right of access: You may request a copy of the personal data creckx holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: In certain circumstances, you may request that creckx delete your personal data. This right is subject to our legal obligation to retain certain records for compliance purposes.
• Right to restriction: You may request that creckx restrict the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data where that processing is based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Include your registered account username and a clear description of the right you wish to exercise. creckx will respond within 30 calendar days of receiving a valid request.

10. Children's Privacy

The creckx platform is strictly intended for adults aged 18 years and above. creckx does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step during the registration process and may be reinforced through KYC document checks.

If creckx discovers or has reason to believe that personal data has been collected from an individual under the age of 18, we will immediately suspend the associated account, delete the data as promptly as possible, and void any bets or transactions associated with that account. Parents or guardians who believe their child may have registered a creckx account should contact us immediately at [email protected].

11. Third-Party Links

The creckx platform may contain references to game studios and payment partners. Please note that creckx does not operate the websites or applications of these third parties and is not responsible for their privacy practices. This Privacy Policy applies solely to data collected and processed by creckx in connection with the creckx platform at creckx.org.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of online gaming and payment platforms, as their data practices may differ from ours.

12. Policy Updates

creckx reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that affect your rights in a material way, we will provide additional notice via your registered email address or via a platform notification.

Your continued use of the creckx platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes to this Policy, you should discontinue use of the platform and contact us to request account closure and data deletion.

13. Contact & Data Requests

For all privacy-related queries, data rights requests, consent withdrawal requests, or concerns about how creckx handles your personal data, please contact our support team using the details below. All communications should be in English and include your registered username.

• Email: [email protected] — subject line: "Privacy Query" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related requests within 48 hours and provide a substantive response within 30 calendar days.
• Live Chat: Available 24/7 via the creckx platform for general privacy questions.
• WhatsApp Support: Available 10:00–22:00 BST (Bangladesh Standard Time, UTC+6) for non-sensitive enquiries.

Please do not share sensitive personal data such as passwords, full payment card numbers, or KYC document images via WhatsApp or live chat. Use encrypted email for sensitive data transmissions.