cerkex Privacy Policy

crkex collects personal data only where it is necessary to provide and maintain our services, comply with legal and regulatory obligations, and protect the integrity of the platform. The categories of data we collect are as follows:

1.1 Registration & Identity Data

When you create a crkex account, we collect your full legal name, date of birth, residential address in Bangladesh (including district, thana, and postcode where applicable), email address, and mobile number. This data is required to establish and maintain your player account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

As part of the KYC verification process required before your first approved withdrawal, we collect copies of government-issued identity documents. Accepted documents include the Bangladesh National Identity Card (NID), a valid passport, or a driving licence. We may also collect a recent utility bill or bank statement as proof of address. These documents are processed solely for identity verification and anti-money laundering (AML) compliance purposes.

1.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and betting or gaming transactions conducted through your crkex account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), timestamps, and transaction reference numbers. We do not store full payment card numbers on our servers; card data is processed by our certified payment partners under their own security standards.

1.4 Technical & Device Data

When you access the crkex platform, our servers automatically record certain technical information including your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, pages visited within the platform, session duration, and in-session activity logs. This data is used to maintain platform security, detect fraudulent activity, and improve the player experience.

1.5 Communication Data

If you contact the crkex support team via live chat, email, or any other communication channel, we retain a record of that interaction including the content of your messages, timestamps, and any resolution notes. This data is used to improve support quality and to maintain an accurate history of your account interactions.

1.6 Responsible Gaming Data

Where you use crkex responsible gaming tools — including deposit limits, time-out requests, or self-exclusion applications — we retain a record of those instructions. This data is treated with the highest level of sensitivity and is used solely to honour your responsible gaming elections and to comply with our duty of care obligations toward players.

crkex processes your personal data on one or more of the following legal bases: performance of a contract (operating your player account), compliance with a legal obligation (AML, KYC, fraud prevention), our legitimate interests (platform security, responsible gaming monitoring, service improvement), or your explicit consent (marketing communications, where applicable).

The specific purposes for which we use your data are set out in the table below:

crkex does not use your personal data for automated decision-making that produces legal or similarly significant effects on your player account without human review. Where automated systems flag an account for investigation (e.g., fraud detection algorithms), a qualified member of the crkex compliance team will review the case before any account action is taken.

crkex does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

The crkex website uses cookies and similar technologies to maintain your session, ensure platform security, and gather anonymised usage analytics. The following categories of cookies are deployed on the crkex platform:

crkex does not deploy third-party advertising cookies, social media pixel tracking, or cross-site behavioural tracking technologies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the crkex platform.

Mobile application users should refer to their device's application permission settings to manage data sharing permissions for the crkex app. Revoking certain permissions (such as network access) will affect core app functionality.

crkex retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply:

As a crkex player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your crkex account. We will respond within 30 calendar days of receiving a verified request.

crkex implements a layered technical and organisational security programme to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key elements of our security infrastructure are described below.

7.1 Encryption in Transit and at Rest

All data transmitted between your device and the crkex servers is encrypted using TLS 1.2 or higher. Sensitive data fields stored in our databases — including identity document scans and payment method identifiers — are encrypted at rest using AES-256 encryption. Database access is gated by multi-factor authentication and role-based access controls.

7.2 Access Controls

Internal access to player personal data is governed by a strict least-privilege policy. Only staff members whose role specifically requires access to personal data (compliance, support, and fraud teams) are granted access rights, and all access events are logged and audited. Former staff credentials are revoked immediately upon departure.

7.3 Security Monitoring

crkex operates continuous security monitoring across its server infrastructure. Anomalous access patterns, failed login attempts, and unusual data export activities trigger automated alerts reviewed by our security team. Regular penetration testing and vulnerability assessments are conducted by qualified third-party security firms.

7.4 Data Breach Response

In the event of a data security breach that is reasonably likely to result in a risk to your rights and freedoms, crkex will notify affected players via their registered email address without undue delay, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps crkex is taking in response.

7.5 Your Role in Account Security

The security of your crkex account is a shared responsibility. You are responsible for maintaining the confidentiality of your login credentials and for logging out of the platform when using shared or public devices. crkex will never ask for your password via email, live chat, SMS, or any other communication channel. If you receive such a request, please treat it as suspicious and report it immediately to [email protected].

crkex reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address on file and display a prominent notice on the crkex platform homepage for a minimum of 14 days following the update. The effective date at the top of this document will be revised to reflect the date of the most recent update.

Your continued use of the crkex platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must contact our support team to request account closure before the effective date of the change.

Previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

How to Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how crkex handles your personal data, please contact our Data Protection team using the details below. We aim to respond to all formal privacy enquiries within 5 business days.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry — [Your Registered Name]" for faster routing
• Response Time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests
• Business Hours: Monday–Sunday, 09:00–21:00 Bangladesh Standard Time (BST, UTC+6)

If you are unsatisfied with crkex's handling of a privacy complaint after raising it with us directly, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.