Privacy Policy — crekcex

📥 01 Information We Collect

crekcex collects personal information from players through several channels — at the point of registration, during the KYC verification process, when transactions are made, when support is requested, and passively through the use of cookies and analytics tools during normal platform usage. The categories of information we collect are described below.

Registration & Account Data

When you create an account on crekcex, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — you must be 18 or older)
• Email address and mobile phone number
• Username and encrypted password
• City and division of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet)

Identity Verification (KYC) Data

Before processing your first withdrawal, crekcex is required to verify your identity. During KYC, we collect:

• Scanned or photographed copies of government-issued ID (National ID Card, Passport, or Birth Certificate)
• A selfie or live photo for facial comparison purposes
• Proof of address (utility bill, bank statement, or similar document — where required)
• Source of funds declaration for high-value withdrawal requests

Transaction & Payment Data

All financial transactions on crekcex are processed in Bangladeshi Taka (৳ BDT). We collect:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Visa or Mastercard card details (card number masked — only last 4 digits stored; full card data is processed by our PCI-DSS compliant payment gateway partner)
• Transaction timestamps, amounts, and reference IDs
• Deposit and withdrawal history associated with your account

Usage & Behavioural Data

As you use the crekcex platform, we automatically collect technical and behavioural data including:

• IP address and approximate geolocation (city-level, not precise GPS)
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Game play history, bet amounts, game outcomes, and session frequency
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

Support & Communication Data

When you contact the crekcex support team via email or live chat, we retain records of those communications, including the content of your messages, timestamps, and the resolution steps taken. This data is used to improve support quality and resolve any ongoing disputes.

⚙️ 02 How We Use Your Data

crekcex uses your personal information only for the purposes described in this section. We do not process your data in ways that are incompatible with the original purpose for which it was collected.

crekcex does not use your personal data for automated decision-making that produces significant legal effects — for example, we do not use profiling algorithms to automatically deny account registrations or payment requests without human review.

⚖️ 03 Legal Basis for Processing

crekcex processes personal data on the following legal grounds, which determine how long we keep your data and what rights you have in relation to it:

• Contract Performance: Processing necessary to create and maintain your account, process payments in ৳ BDT, settle bets, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with age verification laws, anti-money laundering (AML) requirements, know-your-customer (KYC) regulations, and financial reporting obligations applicable in the jurisdictions where we operate.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, customer support improvement, and internal analytics — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications (promotional emails, special offer notifications). Consent may be withdrawn at any time without affecting other processing activities.

Where crekcex relies on legitimate interests as the legal basis for processing, a balancing test has been applied to ensure that the processing is necessary, proportionate, and does not unduly infringe on your privacy rights as a player.

🤝 04 Data Sharing & Third Parties

crekcex does not sell your personal data. We share player data with third parties only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

Game Technology Providers

To deliver our casino game catalogue, crekcex integrates with certified third-party game providers including Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Ezugi, and Microgaming. These providers may receive session tokens and anonymised player identifiers to authenticate your game session. They do not receive your full name, payment details, or national ID data.

Payment Processing Partners

Transaction data is shared with our payment processing partners — including the gateway operators behind bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations — solely to execute the deposit or withdrawal you have requested. These partners operate under their own privacy policies and PCI-DSS compliance obligations.

Identity Verification (KYC) Services

KYC document verification may be handled by a specialist third-party identity verification provider. This provider receives your ID documents and selfie data strictly for the purpose of verifying your identity and confirming your eligibility to withdraw funds. The verified result is returned to crekcex; documents are not retained by the KYC provider beyond the verification period.

Legal & Regulatory Disclosure

crekcex may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal process, court order, or statutory obligation. We will notify affected players of such requests where we are legally permitted to do so.

Business Transfers

In the event that crekcex undergoes a merger, acquisition, or asset sale, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance and given the opportunity to request account deletion before the transfer takes effect.

🍪 05 Cookies & Tracking Technologies

crekcex uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players interact with the site. Below is a summary of the cookies we use and their purposes.

Most web browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling cookies beyond strictly necessary ones may affect your experience on the crekcex platform, particularly features that require a persistent session or remembered preferences.

crekcex does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in retargeting advertising networks.

🗄️ 06 Data Retention & Storage

crekcex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

All player data is stored on servers with access controls and encryption at rest. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

🧑‍⚖️ 07 Your Privacy Rights

As a player on crekcex, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team at support@crekcex from your registered email address. We will respond to verified requests within 30 days.

• Right of Access: You may request a copy of all personal data we hold about you, including your registration details, transaction history, and KYC records. We will provide this in a readable format within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date of birth corrections, updated KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to our legal retention obligations — for example, KYC and financial transaction records must be retained for the periods specified in Section 06 regardless of an erasure request.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while you dispute the accuracy of data we hold, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please note that exercising certain rights — particularly erasure — may require the closure of your account and the forfeiture of any active bonus balances that have not met wagering requirements. We will inform you of any such consequences before processing your request.

🛡️ 08 Data Security Measures

crekcex implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following technical and organisational measures:

• SSL / TLS Encryption in Transit: All data exchanged between your browser or mobile device and crekcex is encrypted using TLS 1.2 or higher with 256-bit key strength. Our SSL certificate is verified and regularly renewed.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment identifiers, and password hashes — is encrypted at rest using AES-256 encryption on our database servers.
• Password Hashing: Player passwords are never stored in plain text. We use an industry-standard adaptive hashing algorithm with per-user salting so that even a breach of our password database would not expose player credentials in usable form.
• Access Controls: Access to player data within crekcex's internal systems is restricted on a need-to-know basis. Staff members with data access privileges undergo background checks and are bound by confidentiality agreements.
• Two-Factor Authentication: All crekcex player accounts support SMS OTP-based 2FA. Players are strongly encouraged to enable this feature through their account security settings.
• Brute-Force Protection: Repeated failed login attempts trigger automatic account lockout and an email notification to the registered address. This prevents credential-stuffing and brute-force attacks.
• Regular Security Audits: crekcex conducts periodic internal security reviews and engages third-party specialists to perform penetration testing on platform infrastructure.
• Incident Response: In the event of a confirmed data breach affecting player personal information, crekcex will notify affected players within 72 hours of becoming aware of the incident, describing the nature of the breach, data affected, and remedial steps taken.

Despite these measures, no platform can guarantee absolute security. Players are reminded that they also bear responsibility for keeping their own login credentials, withdrawal PINs, and OTP codes confidential. Do not share these with anyone, including crekcex support staff.

👶 09 Children's Privacy

crekcex is an adult gambling platform. Access is strictly restricted to individuals who are 18 years of age or older. The platform is not directed at, and does not knowingly collect personal information from, anyone under the age of 18.

As part of our commitment to protecting minors, crekcex requires date of birth information at registration and verifies age through the KYC process before processing withdrawals. If we have reason to believe that a user is under 18, we will immediately suspend the account, investigate, and take appropriate action in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under 18 in your care has registered on crekcex or accessed the platform, please contact us immediately at support@crekcex. We will investigate and take prompt action, including account suspension and deletion of any personal data collected from a minor where legally permissible.

We also encourage parents and guardians to use reputable parental control software to restrict access to gambling websites on shared devices used by minors.

✏️ 10 Changes to This Policy

crekcex may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will:

• Update the "Effective Date" at the top of this page to reflect the date the revised policy takes effect.
• Send an email notification to all registered players at their registered email address, summarising the key changes and linking to the updated policy.
• Display a prominent notice on the crekcex platform for a period of at least 7 days following a material update.

For minor, non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of how data is processed — we may update the policy without proactive player notification, though the Effective Date will always be updated.

Your continued use of crekcex after any revision to this Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should stop using the platform and contact support@crekcex to request account closure and deletion of your personal data (subject to our legal retention obligations).

For any questions, concerns, or requests related to this Privacy Policy or the way crekcex handles your personal data, please contact our support team at support@crekcex. Our team operates 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (UTC+6).