creikx Privacy Policy

1 Information We Collect

creikx collects personal information to operate a safe, compliant, and high-quality gambling platform for players across Bangladesh. We collect only what is necessary for the purposes described in this Policy. The categories of personal data we may hold about you are set out below.

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make a payment, or contact our support team, you voluntarily submit personal information. This includes:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (city, district, and full postal address where required by our verification process).
• Identity document data: Copies of your National ID card, passport, or driving licence submitted during KYC verification.
• Financial data: Payment method identifiers (e.g., your bKash or Nagad mobile number), transaction history, deposit amounts, and withdrawal requests. We do not store full bank account numbers or card numbers on our servers.
• Communications data: Records of live chat conversations, email correspondence, and any feedback or dispute notifications submitted to our support team.

1.2 Information Collected Automatically

When you access the creikx platform through a browser or mobile device, certain technical data is collected automatically by our systems. This data helps us maintain platform security, improve performance, and detect fraudulent activity:

• Device data: Device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
• Log data: IP address, access timestamps, pages visited, session duration, referring URLs, and error logs.
• Location data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data unless you explicitly grant permission on a mobile device.
• Gameplay data: Game session records, bet amounts, game outcomes, bonus usage history, and wagering activity across all product verticals (casino, live dealer, sports betting, crash games).

1.3 Information From Third Parties

In certain circumstances, creikx may receive information about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm the status and outcome of transactions.
• Identity verification and fraud-prevention service providers who assist in validating the authenticity of documents submitted during KYC.
• Game studios (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) who may share session and technical data to resolve disputes or investigate game malfunctions.

2 How We Use Your Data

creikx processes your personal data only for specific, legitimate purposes. The table below summarises the principal processing activities, the data categories involved, and the legal basis on which each activity rests.

Processing Purpose	Data Categories Used	Legal Basis
Account creation and management	Identity, contact, financial	Contractual necessity
KYC / age and identity verification	Identity documents, financial	Legal obligation
Processing deposits and withdrawals	Financial, transaction records	Contractual necessity
Fraud detection and AML compliance	Identity, financial, device, log	Legal obligation / legitimate interest
Responsible gambling monitoring	Gameplay, financial, contact	Legal obligation / legitimate interest
Customer support and dispute resolution	Identity, contact, communications	Contractual necessity
Platform security and abuse prevention	Device, log, gameplay	Legitimate interest
Promotional communications (opt-in only)	Contact, gameplay preferences	Consent
Platform analytics and improvement	Log, device, gameplay (anonymised)	Legitimate interest

2.1 Marketing Communications

creikx will only send you direct marketing messages — including promotional emails, SMS notifications, and bonus alerts — if you have actively opted in during registration or subsequently through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account dashboard or by contacting our support team at [email protected]. Withdrawal of consent for marketing does not affect any other processing activity described in this Policy.

2.2 Automated Decision-Making

creikx uses automated systems to flag accounts for potential fraud, detect unusual betting patterns, and enforce responsible gambling limits. Where an automated system triggers an account restriction or closure, you have the right to request a manual review by a human member of our compliance team. To exercise this right, contact us via live chat or email within 14 days of the automated action being applied to your account.

3 Data Sharing & Disclosure

creikx does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

3.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other licensed studios whose game platforms are integrated into creikx. These providers receive session-level technical data necessary to operate the game.
• Cloud hosting and infrastructure providers: Servers and databases used to store your account data and power the creikx platform.
• Customer support software: Live chat and ticketing systems used by our support team to manage and respond to player enquiries.

All service providers are contractually required to process your data only for the purposes we specify and to maintain security standards consistent with this Privacy Policy.

3.2 Legal and Regulatory Disclosure

creikx may be required to disclose personal data to third parties in the following circumstances:

• In response to a valid court order, subpoena, or legally binding request from a law enforcement or government authority.
• To comply with anti-money laundering (AML) obligations, including the submission of suspicious activity reports to relevant financial intelligence authorities.
• To enforce our Terms & Conditions, investigate suspected fraud, or protect the rights, property, or safety of creikx, its employees, or other players.

3.3 Business Transfers

In the event that creikx undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, we will take reasonable steps to ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy. You will be notified of any material change in data controller by a prominent notice on the platform at least 30 days before the transfer takes effect.

4 Cookies & Tracking Technologies

creikx uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file stored on your device when you visit our website. The following categories of cookies may be active on the creikx platform:

Cookie Type	Purpose	Required?
Strictly Necessary	Maintain your login session, store your cart and game state, prevent cross-site request forgery (CSRF) attacks.	Yes — cannot be disabled
Functional	Remember your language preferences, display settings, and game lobby filters between sessions.	Optional
Performance / Analytics	Collect anonymised data on page load times, most visited sections, and navigation paths to help us improve the platform.	Optional
Security	Detect and flag unusual login activity, bot traffic, and suspicious device behaviour.	Yes — cannot be disabled

creikx does not use third-party advertising cookies or place tracking pixels for the purpose of serving targeted advertisements on other websites. You may manage optional cookie categories through your browser settings. Please note that disabling functional cookies may affect your experience on the platform, including the loss of saved preferences between sessions.

5 Data Retention & Storage

creikx retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with creikx, plus a minimum of five years following account closure to satisfy AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years following the completion of the verification process, or longer where mandated by financial intelligence regulations.
• Transaction records: All deposit, withdrawal, and gameplay transaction records are retained for a minimum of five years in compliance with standard financial record-keeping requirements.
• Customer support communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account plus three years, to demonstrate compliance in the event of a regulatory query.
• Technical log data: Server access logs and security event logs are retained for up to 12 months, after which they are permanently deleted or anonymised.

When personal data is no longer required under our retention schedule, it is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

As a creikx account holder, you have meaningful rights over your personal data. We take these rights seriously and will respond to valid requests within a reasonable timeframe — typically within 30 days of receipt. The rights available to you include the following:

6.1 Right of Access

You may request a copy of all personal data that creikx holds about you. This includes account information, KYC records, transaction history, gameplay records, and support communications. We will provide this information in a structured, readable format free of charge for the first request per calendar year.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For certain data fields (such as your display name or contact email), you may update these directly through your account settings. For identity-linked data (such as your legal name or date of birth), correction requests must be submitted to our support team with supporting documentation.

6.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Please note that creikx cannot delete data that we are legally obligated to retain (such as KYC records and financial transaction logs). Where erasure is not possible in full, we will explain which data must be retained and why.

6.4 Right to Restriction of Processing

In certain circumstances — such as while you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over deletion — you may request that we limit how your data is used. During a period of restriction, we will continue to store your data but will not process it for any purpose other than storage and responding to your rights request.

6.5 Right to Data Portability

Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that we provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider. This right applies to data you have provided directly, not to data derived from our analysis of your activity.

6.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests — including profiling for responsible gambling monitoring and anonymised platform analytics. Where you object, creikx will cease that processing activity unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

7 Data Security Measures

Protecting your personal data against unauthorised access, disclosure, alteration, and destruction is a core operational commitment at creikx. We implement a layered security architecture that includes both technical and organisational safeguards:

• SSL/TLS encryption: All data transmitted between your device and the creikx platform is encrypted using 256-bit SSL/TLS protocols. You can verify the secure connection via the padlock icon in your browser address bar.
• Encrypted data storage: Sensitive data at rest — including identity documents, payment method references, and account credentials — is stored using industry-standard encryption algorithms.
• Access controls: Access to personally identifiable data within creikx systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA): creikx supports 2FA on player accounts as an additional layer of protection against unauthorised login attempts.
• Intrusion detection: Automated monitoring systems scan for unusual access patterns, brute-force attempts, and other indicators of compromise on a continuous basis.
• Penetration testing: creikx conducts periodic security assessments to identify and remediate potential vulnerabilities in platform infrastructure before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a high risk to your rights and interests, creikx will notify affected users as promptly as possible and take all reasonable steps to contain and remediate the incident.

8 Policy Updates & Contact

8.1 Changes to This Policy

creikx reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, operational requirements, or applicable legal standards. When we make material changes — meaning changes that substantively affect how we collect, use, or share your personal data — we will notify registered players by email and by displaying a prominent notice on the platform at least 14 days before the changes come into effect.

Minor or clarifying updates (such as correcting typographical errors, updating contact information, or improving the clarity of existing descriptions without altering their substance) may be made without advance notice. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the creikx platform following the effective date of any update constitutes acceptance of the revised Policy.

8.2 Contacting Us About Privacy

If you have a question, concern, or formal request relating to your personal data or this Privacy Policy, our team is available to assist you at any time:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the platform chat widget
• Response time: We aim to acknowledge all privacy-related enquiries within 2–5 minutes via live chat, and within 24 hours via email.

For formal data rights requests (access, erasure, portability, etc.), please clearly state in your message that you are submitting a data subject rights request and provide the email address or mobile number registered to your creikx account so we can locate your records efficiently.