crixco Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy applies to all services operated by crixco, including the website at crixco.net, any associated mobile applications available for download, and all related customer support channels. By accessing or using any crixco service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

crixco is an online casino and sports betting platform serving players in Bangladesh. Because we handle both financial transactions (deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay) and account-based gambling activity, we are required to collect and process certain categories of personal data to operate legally, securely, and fairly. We collect only what is necessary for the purposes described in this document.

Information We Collect

crixco collects personal data in three primary ways: information you provide directly when registering or transacting, information generated automatically through your use of the platform, and information obtained from third-party identity verification and payment processing partners. The categories below describe each type in detail.

Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address as submitted during account creation.
• Identity verification documents: Copies of government-issued national ID (NID), passport, or other documents submitted to verify your age and identity in compliance with our Know Your Customer (KYC) obligations.
• Financial information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction records associated with deposits and withdrawals. crixco does not store full card numbers or CVV codes.
• Communications: The content of messages, emails, or live chat conversations you initiate with the crixco support team at [email protected].
• Responsible gaming preferences: Deposit limits, self-exclusion requests, cooling-off periods, and session time limits you set voluntarily through your account settings.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, screen resolution, and unique device identifiers.
• Usage and session data: Pages visited, games played, bets placed, session duration, click patterns, search queries within the platform, and navigation paths.
• Geolocation data: Approximate location derived from your IP address, used solely to verify that you are accessing crixco from Bangladesh and to comply with applicable jurisdiction restrictions.
• Log data: Server-side logs recording login timestamps, failed login attempts, transaction events, and error reports for security and diagnostic purposes.

Information from Third Parties

• Payment processors: Transaction confirmation references, payment status updates, and fraud-screening flags received from bKash, Nagad, Rocket, Upay, and partnered bank payment gateways.
• Identity verification services: Age and identity confirmation results from third-party KYC providers used to validate the documents you submit.
• Anti-fraud and AML providers: Risk-scoring signals from compliance tools used to detect and prevent money laundering, account takeover, and fraudulent activity on the platform.

How We Use Your Information

crixco uses the personal data it collects for specific, defined purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent or having a clear legal basis to do so.

crixco does not sell, rent, or trade your personal data to third-party marketers. Your information is never used to build advertising profiles for external parties. Any marketing communications from crixco are sent only to users who have actively opted in during or after account registration, and you may withdraw your consent at any time by contacting [email protected].

Legal Basis for Processing

Every instance of personal data processing by crixco rests on at least one of the following recognised legal bases. We process your data only when one or more of these bases applies:

• Contractual necessity: Processing your registration data, KYC documents, and payment details is necessary to perform the contract between you and crixco — that is, to provide the online casino and betting services you have requested.
• Legal obligation: crixco is subject to anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification duties. Processing identity documents and transaction records is required to comply with these obligations.
• Legitimate interests: We process device data, IP addresses, and session logs to protect the platform and our users from fraud, account takeover, and abuse. These legitimate security interests are proportionate and do not override your fundamental privacy rights.
• Consent: For optional marketing communications and non-essential analytics cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time without penalty.

Data Sharing & Third Parties

crixco shares your personal data only with third parties that are essential to delivering the services you use. All third-party partners are contractually required to handle your data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

Categories of Third Parties

• Payment service providers: bKash, Nagad, Rocket, Upay, and partnered banks receive the minimum data necessary to process your deposit and withdrawal transactions (typically your wallet number, transaction amount, and reference ID).
• KYC and identity verification providers: Third-party identity verification services receive copies of your submitted documents to perform age and identity checks on crixco's behalf. These providers operate under strict data processing agreements.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player reference to enable game launch and round-result recording. These providers do not receive your name, contact details, or financial data.
• Fraud prevention and AML compliance tools: Risk-scoring and compliance platforms receive anonymised or pseudonymised transaction and behavioural data to generate fraud-risk assessments. Raw personal identifiers are not shared unless a confirmed fraud case requires escalation.
• Customer support infrastructure: Ticketing and live chat tools used by the crixco support team store the content of your support conversations in encrypted form. Support agents access only the data necessary to resolve your query.
• Legal and regulatory authorities: crixco may disclose personal data to law enforcement agencies, financial intelligence units, or courts when required to do so by applicable law or when we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

Cookies & Tracking Technologies

crixco uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, keep you logged in between sessions, remember your preferences, and collect anonymised analytics data that helps us improve the user experience.

Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, store your language and currency preferences, and enable core security features like CSRF protection. These cookies cannot be disabled without breaking the site.
• Functional cookies: These remember your game preferences, lobby layout settings, and responsible gaming configurations (such as deposit limit reminders) to personalise your experience across sessions.
• Analytics cookies: Anonymised cookies track aggregate usage patterns — such as which game categories are most visited and at what times — to inform product and content decisions. No individual player profiles are created from analytics data.
• Security cookies: Short-lived cookies support fraud detection by fingerprinting device characteristics during login and high-value transaction events. These expire within the session or within 24 hours.

crixco does not use third-party advertising cookies or any tracking technology that serves ads on external websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or entirely prevent your ability to use the crixco platform. Functional and analytics cookies can be disabled without affecting core platform access.

Data Retention & Storage

crixco retains your personal data for as long as your account remains active and for a defined period thereafter, as required by our legal and regulatory obligations. The table below summarises our standard retention periods by data category.

All personal data held by crixco is stored on servers secured with AES-256 encryption at rest and TLS 1.2 or higher in transit. Access to personal data is strictly role-based — only crixco personnel with a documented business need are granted access, and all access events are logged and audited.

Upon expiry of the applicable retention period, crixco securely deletes or permanently anonymises your data using industry-standard data destruction methods. Anonymised or aggregated data — from which individual identities cannot reasonably be reconstructed — may be retained indefinitely for statistical and product-improvement purposes.

Your Rights Over Your Data

As a crixco player, you hold meaningful rights over the personal data we process about you. crixco respects these rights and will respond to valid requests within a reasonable timeframe — typically within 30 days of receipt. To exercise any of the rights below, contact us in writing at [email protected].

• Right of access: You may request a copy of all personal data crixco holds about you, including the categories of data, the purposes for which it is processed, and the retention periods that apply.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic profile information directly from your account settings without contacting support.
• Right to erasure ("right to be forgotten"): You may request that crixco delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that this right is subject to our legal retention obligations — we cannot erase data we are legally required to retain (such as KYC and transaction records).
• Right to restriction of processing: In certain circumstances, you may request that crixco restricts the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request a structured, machine-readable copy of your data for transfer to another service provider.
• Right to withdraw consent: Where crixco relies on consent as the legal basis for processing (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out under crixco's legitimate interests where you believe your fundamental rights and freedoms outweigh those interests. crixco will assess each objection on its merits.

Changes to This Policy

crixco reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes significantly affect how we use your personal data, we will notify registered players via email or an in-platform notice prior to the changes taking effect.

Minor clarifications, formatting corrections, or editorial updates that do not affect the substance of how your data is processed will be reflected on this page without individual notification. It remains your responsibility to review this Privacy Policy periodically. Continued use of the crixco platform after an updated Privacy Policy has been published constitutes acceptance of the revised terms.

For any questions, concerns, or complaints regarding this Privacy Policy or crixco's data handling practices, please contact our support team at [email protected]. Our team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6) and will acknowledge your privacy-related query within one business day. 18+