criekes Privacy Policy

Information We Collect

criekes collects personal information from you in a number of ways when you register for an account, use our Platform, contact our support team, or interact with our promotional offers. The categories of information we collect are described below.

1.1 Registration & Account Information

When you create a criekes account, we collect the following information: your full legal name, date of birth, residential address, email address, and mobile phone number. Where you link a bKash, Nagad, or Rocket wallet as a payment method, we also collect the associated mobile number for payment routing and identity verification purposes.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to verify that you are aged 18 or above, criekes may request copies of a valid government-issued identity document such as a National Identity Card (NID), passport, or driving licence. We may also request proof of address, such as a recent utility bill or bank statement from a Bangladesh bank such as Dutch-Bangla Bank, BRAC Bank, or Sonali Bank.

1.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and wagering activity on your account, including transaction amounts in BDT, timestamps, payment method identifiers, and transaction reference numbers. This data is required for account management, fraud prevention, and anti-money laundering (AML) compliance.

1.4 Technical & Usage Data

When you visit criekes, we automatically collect certain technical information from your device and browser, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, time spent on each page, and in-session click and scroll behaviour. This information is collected to ensure the Platform operates correctly and to improve your user experience.

1.5 Communications Data

When you contact our support team via live chat or email at [email protected], we retain a record of that communication, including the content of messages exchanged, timestamps, and any attachments provided. This data is used for quality assurance, dispute resolution, and training purposes.

How We Use Your Data

criekes uses the personal information we collect for specific, legitimate purposes. We do not use your data in any manner inconsistent with the purposes disclosed in this Privacy Policy. The principal purposes for which we process your data are set out in the table below.

criekes does not use your personal data to make automated decisions that produce significant legal effects on you without human review. Where automated systems flag an account for fraud or bonus abuse, the account is placed under review by a qualified member of our compliance team before any action is taken.

Data Sharing & Disclosure

criekes does not sell your personal data to any third party. We may, however, share specific categories of your data with trusted third parties where it is necessary to provide our services, comply with legal obligations, or protect the legitimate interests of criekes and our players. All third-party data processors are bound by strict confidentiality obligations and may only use the data they receive for the specific purpose for which it was shared.

• Payment Service Providers: We share necessary transaction data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely to process your deposit and withdrawal instructions. These providers are subject to their own privacy policies and financial regulation requirements.
• Game Technology Providers: Game providers such as Pragmatic Play, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi receive a session identifier and stake/result data to operate their games within the criekes Platform. They do not receive your full name, address, or payment details.
• Identity Verification Services: Where we engage a third-party KYC provider to assist with document verification, that provider will receive the identity documents you submit. They are contractually prohibited from retaining or using your documents for any other purpose.
• Analytics Providers: We may use third-party analytics tools to help us understand how players use the criekes Platform. These tools receive anonymised or pseudonymised data only; your full identity is not disclosed.
• Legal & Regulatory Authorities: criekes will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or other binding legal process. Where permitted, we will notify you of such disclosure.
• Business Transfers: In the event that criekes undergoes a merger, acquisition, or transfer of business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer.

criekes does not share your personal information with social media platforms, advertising networks, or data brokers. We do not permit any third party to use your data for their own independent marketing or profiling purposes.

Cookies & Tracking Technologies

criekes uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by your web browser when you visit criekes. Cookies allow us to recognise your device on subsequent visits and to maintain your session state while you are logged in.

Types of cookies used by criekes:

You can manage or disable cookies via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your criekes account. Disabling functional cookies may result in certain preferences not being saved between visits. Analytics cookies can be disabled without affecting the core functionality of the Platform.

criekes does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts that would allow external networks to build a profile of your browsing behaviour across other websites.

Data Retention & Storage

criekes retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply to the principal categories of data we hold.

All personal data held by criekes is stored on secure servers. At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes.

Data Security Measures

Protecting your personal information is a core operational priority for criekes. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• Transport Layer Security (TLS): All data in transit between your device and criekes servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that your connection to criekes is encrypted at all times.
• Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 encryption. This means that even in the unlikely event of a database compromise, the data would not be readable without the encryption keys.
• Access Controls: Internal access to systems containing personal data is restricted based on the principle of least privilege. Employees and contractors who do not require access to specific data categories to perform their role are denied access. All access is logged and audited.
• Password Security: Account passwords are stored using a one-way cryptographic hashing algorithm with salting. criekes does not store plain-text passwords and cannot retrieve your password — only a password reset is possible.
• Two-Factor Authentication (2FA): criekes offers optional two-factor authentication for account logins via a one-time code delivered to your registered mobile number. We strongly recommend enabling 2FA on your criekes account.
• Security Monitoring: criekes operates continuous security monitoring of its infrastructure, including intrusion detection systems, anomaly detection on login events, and automated alerting for unusual account activity.
• Staff Training: All criekes personnel who handle personal data receive mandatory data protection training. Staff are subject to confidentiality agreements and disciplinary procedures for any misuse of personal information.
• Incident Response: In the event of a personal data breach that poses a risk to affected individuals, criekes will take immediate containment action, investigate the scope of the incident, and notify affected users without undue delay.

While criekes takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is completely secure. We encourage you to also take precautions on your end, such as using a strong unique password for your criekes account and keeping your device's operating system and browser up to date.

Your Privacy Rights

As a criekes player, you hold a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" from the email address registered on your criekes account. We will respond within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data criekes holds about you, together with information about how it is used and with whom it has been shared. This is sometimes called a "Subject Access Request".
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account information directly via your criekes account settings. For KYC-related corrections, please contact our support team.
• Right to Erasure: In certain circumstances, you have the right to request that criekes delete the personal data we hold about you. This right is not absolute — we are entitled to retain data where we have a legal obligation to do so (for example, financial transaction records required for AML compliance) or where retention is necessary for legitimate dispute resolution purposes.
• Right to Restrict Processing: You may request that criekes restrict the processing of your personal data in certain circumstances, for example if you contest the accuracy of the data or object to its use for a particular purpose. Where processing is restricted, we will continue to store the data but will not actively use it until the restriction is lifted.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You may also object at any time to the use of your data for direct marketing purposes, including marketing related to BPL season promotions, Eid bonuses, or new game launches.
• Right to Data Portability: Where personal data has been provided by you and is processed on the basis of consent or contractual necessity, you may request that criekes provide that data to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where the processing of your personal data is based on consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

Policy Updates & Contact

criekes reserves the right to update or modify this Privacy Policy at any time. When changes are made, the revised policy will be published on this page with an updated effective date. For material changes that significantly affect how we use your personal data, we will provide advance notice via email to the address registered on your account, where reasonably practicable, at least 7 days before the changes take effect.

Your continued use of the criekes Platform after a revised Privacy Policy becomes effective constitutes your acceptance of the updated policy. If you do not agree with any change to this Privacy Policy, you may close your account and request deletion of your data in accordance with the rights described in Section 7 above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way criekes handles your personal data, please contact us using the details below. We take all privacy-related enquiries seriously and will respond promptly.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the criekes Privacy Policy. The English language version of this policy is the authoritative version; in the event of any conflict or inconsistency between versions in different languages, the English version shall prevail.