creicex Privacy Policy
At creicex, we take the privacy of every player in Bangladesh seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information. We are committed to transparent, responsible data handling at every stage of your journey with us.
Your Consent. By creating an account on creicex, making a deposit, or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not use the creicex platform. For any privacy-related queries, contact us at [email protected].
Section 1
Data We Collect
creicex collects personal data from players in Bangladesh through several channels: directly from you when you register an account or interact with our support team, automatically through your use of the platform, and from third-party partners involved in payment processing and identity verification. We collect only the data that is genuinely necessary for the lawful and efficient operation of the creicex platform.
Identity & Registration Data
When you register an account with creicex, we collect your full legal name, date of birth, email address, mobile phone number registered in Bangladesh, and the mobile wallet number (bKash, Nagad, Rocket, or Upay) you intend to use for financial transactions. This information is essential for creating and maintaining your account, verifying your identity, and processing payments accurately.
Know Your Customer (KYC) Documents
As part of our KYC verification process, we may request copies of government-issued identity documents such as your National Identity Card (NID) or passport, along with proof of address such as a recent utility bill or bank statement. These documents are processed securely and are used solely for identity verification and fraud prevention purposes.
Financial Transaction Data
creicex records all financial transactions associated with your account, including deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; withdrawals processed to your registered payment method; bonus credits and wagering activity; and win and loss records. This data is retained for financial reconciliation, anti-money-laundering (AML) compliance, and tax reporting obligations.
Technical & Device Data
When you access the creicex platform — whether via a web browser on desktop or a mobile device — our systems automatically record certain technical information. This includes your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited within the creicex platform, session duration, and in-game activity logs. This technical data is used for platform security, fraud detection, performance optimisation, and responsible gaming monitoring.
Communications Data
If you contact the creicex support team via email at [email protected] or through any in-platform messaging feature, we retain records of your communications for quality assurance, dispute resolution, and compliance purposes.
Our Commitment
How We Protect Your Privacy
These six principles guide every data handling decision made by the creicex team, from the moment you register your account to the moment you request its closure.
End-to-End Encryption
All data transmitted between your device and the creicex platform is protected by 256-bit SSL/TLS encryption. Payment data handled via bKash, Nagad, and Rocket channels is processed over encrypted, tokenised connections so your financial details are never exposed in transit.
Minimal Data Collection
creicex applies a data-minimisation principle — we collect only the information that is strictly necessary for operating your account, processing your transactions, and meeting our legal obligations. We do not collect data speculatively or for purposes unrelated to delivering our services.
Strict Access Controls
Access to player personal data within creicex is limited to personnel who require it to perform their specific role — such as KYC verification officers, finance team members, and senior support agents. All staff with data access undergo regular privacy and security training.
No Unauthorised Data Sales
creicex does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your data is shared only with the specific service partners necessary for operating the platform — and only under strict contractual data-protection obligations.
Defined Retention Periods
creicex retains your personal data only for as long as it is required for the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised in accordance with our internal data lifecycle policy.
Player Rights Respected
creicex recognises and upholds your rights over your own data — including the right to access a copy of your data, the right to request corrections, and the right to request deletion of data we are not legally required to retain. Requests are handled within 14 days of receipt.
Section 2
How We Use Your Data
creicex uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with those purposes without first seeking your consent. The primary purposes for which we process player data are set out below.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Name, email, phone number, date of birth, wallet number | Contractual necessity |
| Identity verification (KYC) | NID / passport, proof of address, payment method documents | Legal obligation & contractual necessity |
| Payment processing | Transaction records, wallet numbers, payment method data | Contractual necessity |
| Fraud prevention & AML | Transaction patterns, IP address, device data, login history | Legal obligation & legitimate interest |
| Responsible gaming monitoring | Betting patterns, session duration, deposit frequency | Legal obligation & player protection |
| Customer support | Communications records, account history, transaction data | Contractual necessity & legitimate interest |
| Platform improvement | Aggregated usage analytics, device & browser data | Legitimate interest |
| Promotional communications | Email address, communication preferences | Consent (opt-in only) |
Where creicex relies on your consent as the legal basis for processing — for example, sending you promotional emails about upcoming BPL cricket offers, Eid bonus promotions, or new slot releases — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.
Section 3
Data Sharing & Third Parties
creicex does not sell your personal data to any third party. However, the operation of a safe and compliant online gaming platform necessarily involves sharing certain data with trusted service partners. All third parties with whom creicex shares player data are contractually required to process that data only for the specified purpose and to maintain data security standards consistent with those applied by creicex.
Payment Processors
To process your deposits and withdrawals, creicex shares the minimum necessary payment information with the relevant payment service providers. These include mobile financial service operators (bKash, Nagad, Rocket, Upay) and card-scheme processors (Visa and Mastercard). Each of these providers operates under its own privacy and data security framework. creicex shares only the transaction data required to execute the specific payment instruction.
Game Providers
Casino and sports betting content on the creicex platform is provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and wagering data to facilitate game delivery, calculate jackpot pools, and perform their own fairness auditing. They do not receive your personally identifiable information (name, NID, contact details) unless legally required.
Identity Verification Partners
creicex may engage third-party KYC and identity verification services to assist in confirming the identity of players and screening against sanctions lists and politically exposed persons (PEP) databases. Such partners are bound by strict confidentiality obligations and process identity documents solely for the purposes of verification.
Legal & Regulatory Disclosures
creicex may disclose player data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, by a court order, or in response to a lawful regulatory request. In such cases, creicex will disclose only the data that is specifically required by the relevant authority.
Section 5
Data Security Measures
creicex implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no digital system can guarantee absolute security, creicex maintains security standards consistent with industry best practice for online gaming platforms operating in the Bangladesh market.
- Encryption in Transit. All data exchanged between your browser or mobile device and the creicex platform is encrypted using TLS 1.2 or higher. This applies to account login, payment processing, and all in-platform communications.
- Encryption at Rest. Sensitive personal data stored in creicex databases — including identity documents, payment records, and account credentials — is encrypted at rest using AES-256 encryption. Database access is restricted by role-based access controls.
- Password Security. Account passwords are stored using industry-standard one-way hashing algorithms. creicex staff cannot view your password in plain text. If you forget your password, you will be directed through a secure account recovery process.
- Intrusion Detection & Monitoring. creicex operates continuous server monitoring, automated anomaly detection systems, and intrusion detection tools to identify and respond to suspicious activity in real time — 24 hours a day, seven days a week, including Bangladesh national holidays.
- Third-Party Security Audits. The creicex platform undergoes periodic security reviews conducted by independent technical specialists. Findings from these reviews are actioned on a risk-prioritised basis to maintain the integrity of the platform and the safety of player data.
- Incident Response. In the event of a confirmed data security incident affecting player personal data, creicex will take immediate steps to contain the incident, assess the scope of impact, and notify affected players as promptly as practicable, along with guidance on protective steps players should take.
Section 6
Data Retention
creicex retains your personal data for the period necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with applicable legal, regulatory, and financial record-keeping obligations. The specific retention periods applicable to different categories of player data are outlined below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and regulatory obligation |
| KYC identity documents | Duration of account + 5 years post-closure | AML compliance requirement |
| Financial transaction records | Duration of account + 7 years post-closure | Financial record-keeping obligation |
| Betting & gaming history | Duration of account + 3 years post-closure | Dispute resolution & responsible gaming audit |
| Support communications | 3 years from date of communication | Quality assurance & dispute evidence |
| Technical & device logs | 12 months rolling | Security monitoring & fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management compliance |
Once the applicable retention period expires, creicex will securely delete or irreversibly anonymise the relevant data so that it can no longer be associated with any individual player. Where deletion is not immediately possible due to technical constraints — for example, data held in backup archives — the data will be isolated from active systems and deleted at the earliest available opportunity.
Section 7
Your Privacy Rights
As a creicex player, you hold specific rights in relation to the personal data we hold about you. creicex is committed to facilitating the exercise of these rights in a straightforward and timely manner. All privacy rights requests should be submitted in writing to [email protected] from your registered email address. creicex will acknowledge your request within 48 hours and provide a substantive response within 14 days.
Right of Access
You have the right to request a copy of all personal data that creicex holds about you. Upon receiving a verified access request, we will provide you with a summary of the data categories we hold, the purposes for which each category is processed, and the sources from which the data was collected. We may ask you to verify your identity before fulfilling an access request to protect your data from unauthorised disclosure.
Right to Rectification
If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. Basic account information — such as your registered email address or mobile number — can be updated directly through your creicex account settings. For more complex corrections, such as amendments to identity documents submitted during KYC, please contact the support team.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing based on legitimate interest and no overriding grounds exist. Please note that creicex may be unable to fulfil erasure requests in full where retention is required by law — for example, financial transaction records that must be retained for AML compliance purposes will not be deleted on request.
Right to Restriction of Processing
In certain circumstances — such as where you contest the accuracy of data we hold, or where you have objected to processing pending a determination of legitimate interest — you may request that we restrict the processing of your data. During a period of restriction, we will continue to store your data but will not actively process it for other purposes.
Right to Object
Where creicex processes your data on the basis of legitimate interest — including for platform analytics, fraud detection enhancement, and responsible gaming pattern analysis — you have the right to object to that processing. creicex will cease processing on those grounds unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent
Where creicex has relied on your consent as the basis for processing — most commonly for sending you promotional communications about bonuses, new games, and seasonal offers such as Eid promotions and BPL cricket specials — you may withdraw that consent at any time without penalty. You can manage your marketing preferences in your account settings, or contact [email protected] to opt out.
Section 8
Policy Updates & Contact
creicex reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the effective date shown at the top of this document. For significant changes that may substantially affect your rights or the way we use your data, we will provide additional notice — such as a notification within your account dashboard or an email to your registered address.
Your continued use of the creicex platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact us to request account closure and deletion of your data to the extent permitted by law.
Players in Bangladesh who have questions, concerns, or complaints regarding the handling of their personal data by creicex are encouraged to contact our support team in the first instance. We take all privacy concerns seriously and aim to resolve them promptly and fairly.
For all privacy-related matters, you can reach the creicex data team at: [email protected]. Please use the subject line "Privacy Query" to ensure your message is routed to the appropriate team member. Our support team operates in Bangladesh Standard Time (BST, UTC+6) and is available 24 hours a day, seven days a week.
This Privacy Policy applies exclusively to data processed by creicex in connection with the platform at https://creicex.net. It does not apply to third-party websites, payment platforms, or game providers that you may access through links or integrations within the creicex platform. We encourage you to review the privacy policies of those third parties independently.
Ready to Play at creicex?
Your privacy is protected every step of the way. Explore our full game catalogue, check out our FAQ for common questions, or review our Terms & Conditions for complete platform rules.
Explore creicex Casino Read Our FAQ Terms & Conditions