cxrick Privacy
Policy

1 Information We Collect

cxrick collects personal data in the following categories, each of which serves a specific and documented operational purpose:

1.1 Registration & Identity Data

When you create a cxrick account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile phone number, and residential address. This data is required to open your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

To process withdrawals and fulfil our anti-money laundering (AML) obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request a recent utility bill or bank statement as proof of address, and a photograph of the payment instrument used for deposits (e.g., a screenshot of your bKash or Nagad account confirming ownership).

1.3 Financial Transaction Data

We record details of every deposit and withdrawal processed through your cxrick account, including the transaction amount in Bangladeshi Taka (৳), the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction timestamp, and the transaction reference number issued by the payment processor. We do not store full payment card numbers on our servers; card data is tokenised by our payment processing partners.

1.4 Betting & Gaming Activity Data

cxrick logs a complete history of your betting and gaming activity on the platform, including bet placements, bet amounts, selected markets, game sessions, win/loss outcomes, and bonus redemptions. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical & Device Data

When you access cxrick, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, the referring URL (the page you visited before arriving at cxrick), session duration, and pages visited within the platform. This data is used for security monitoring, fraud prevention, and platform performance analysis.

1.6 Communications Data

If you contact our support team via live chat or email, we retain a record of those communications, including the content of messages and the timestamps of each exchange. This data is used to resolve your queries, improve our support quality, and maintain a record of any dispute communications.

2 How We Use Your Data

cxrick processes your personal data only for purposes that are lawful, specific, and proportionate. The following describes the primary purposes for which your data is used:

• Account Management: Creating and maintaining your cxrick account, processing your deposits and withdrawals, and providing access to the platform's betting and gaming features;
• Identity Verification: Conducting KYC checks to verify your age (18+ only), identity, and address, as required by our operating standards and anti-fraud policies;
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and reconciling transaction records with payment partners;
• Security & Fraud Prevention: Monitoring account activity to detect and prevent unauthorised access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities;
• Responsible Gaming: Monitoring betting patterns to identify indicators of problem gambling and proactively engaging players where appropriate, as set out in our Responsible Gaming Policy;
• Customer Support: Responding to your queries, resolving disputes, and maintaining a record of support interactions for quality assurance purposes;
• Legal Compliance: Fulfilling our obligations under applicable law, including record-keeping requirements, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions;
• Platform Improvement: Analysing aggregated, anonymised usage data to identify performance issues, improve game selection, and enhance the overall user experience on cxrick;
• Promotional Communications: Sending you information about bonuses, promotions, and platform updates, where you have not opted out of marketing communications. You may unsubscribe at any time by contacting our support team.

cxrick does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Our fraud detection systems may flag accounts for review, but all account-level decisions are subject to manual assessment by our compliance team.

3 Data Sharing & Disclosure

cxrick does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be disclosed to third parties only in the following limited and documented circumstances:

3.1 Payment Processing Partners

To process your deposits and withdrawals, cxrick shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks. These partners are independently operated companies with their own privacy policies. cxrick is not responsible for the data practices of payment processors once data is transmitted to them for transaction processing purposes.

3.2 Identity Verification Services

cxrick may use third-party identity verification service providers to assist with KYC compliance. These providers receive only the data necessary to perform identity checks (such as your name, date of birth, and document images) and are contractually prohibited from using that data for any other purpose.

3.3 Game Software Providers

The casino and betting games available on cxrick are powered by third-party software providers including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi. These providers may receive technical session data (such as a pseudonymous player ID and session token) to enable game functionality. They do not receive your full identity data unless required for their own regulatory compliance.

3.4 Legal & Regulatory Authorities

cxrick will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of cxrick, its players, or the public.

3.5 Business Transfers

In the event that cxrick undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy commitments applicable to your data following the transaction.

4 Cookies & Tracking Technologies

cxrick uses cookies and similar tracking technologies to operate the platform effectively and deliver a consistent user experience. A cookie is a small text file placed on your device by our web server when you visit cxrick. The following categories of cookies are used:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that distribute traffic across our servers. Without these cookies, core platform features including login, account balance display, and bet placement would not work.

4.2 Functional Cookies

Functional cookies remember your preferences, such as your chosen language, display settings, and any responsible gaming limits you have configured on your account. These cookies improve your experience by ensuring you do not need to re-enter preferences on each visit.

4.3 Analytics Cookies

cxrick uses first-party analytics tools to measure how players use the platform, identify pages with performance issues, and understand which features are most valued. Analytics cookies collect aggregated, anonymised data and do not identify you as an individual. No third-party analytics providers with cross-site tracking capabilities (such as advertising networks) are used.

4.4 Managing Cookies

Most modern browsers allow you to view, manage, and delete cookies through their settings menus. Disabling strictly necessary cookies may prevent parts of the cxrick platform from functioning correctly. Disabling functional or analytics cookies will not affect your ability to place bets or access your account, but may reduce the quality of your personalised experience. Please consult your browser's help documentation for specific instructions on cookie management.

5 Data Security Measures

cxrick implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our current security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted;
• Encrypted Data Storage: Sensitive data fields, including passwords and identity document images, are stored using strong encryption algorithms. Passwords are hashed using a one-way cryptographic function and are never stored in recoverable plain text;
• Access Controls: Access to personal data within cxrick's internal systems is restricted on a strict need-to-know basis. Employees and contractors with access to player data undergo background screening and are subject to confidentiality obligations;
• Intrusion Detection: Our infrastructure is monitored 24 hours a day, 7 days a week for signs of unauthorised access, unusual data access patterns, and potential security incidents;
• Secure Payment Tokenisation: Full payment card numbers are never stored on cxrick servers. Card data is tokenised by our PCI-DSS compliant payment partners at the point of entry;
• Regular Security Reviews: cxrick conducts periodic internal reviews of its data security practices and updates its security controls in response to new threats and industry developments.

While cxrick takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. In the event of a data breach that affects your personal data, cxrick will notify you without undue delay, providing details of the nature of the breach, the data affected, and the steps we are taking to address it.

6 Data Retention Policy

cxrick retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of data we hold:

Once the applicable retention period expires, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

7 Your Privacy Rights

As a cxrick player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with a clear description of your request and sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of the personal data that cxrick holds about you, along with information about how that data is being used. We will respond to verified access requests within 30 days. There is no fee for a standard access request; however, where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor updates (such as email address or phone number changes) can be made directly through your account settings. Changes to identity data (such as legal name) will require supporting documentary evidence.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that cxrick may be required to retain certain data for legal, regulatory, or fraud-prevention purposes even following a deletion request. Where full erasure is not possible, we will inform you of the specific data that must be retained and the reason for retention.

7.4 Right to Restrict Processing

You have the right to request that cxrick restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing and a determination is pending.

7.5 Right to Object to Marketing

You may opt out of receiving promotional communications from cxrick at any time by contacting our support team or using the unsubscribe mechanism included in any marketing email. Opting out of marketing will not affect your ability to receive service-related communications such as transaction confirmations and security alerts.

7.6 Response Timeframes

cxrick will acknowledge all privacy rights requests within 5 business days and will provide a substantive response within 30 calendar days of receiving a verified request. Where a request is complex or involves a large volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8 Children's Privacy

If cxrick becomes aware that it has inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have created a cxrick account using false information, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

Parents and guardians are encouraged to use parental control software to restrict minors' access to online gambling platforms. cxrick supports industry-wide efforts to prevent underage gambling and cooperates fully with any investigation into suspected underage account access.

9 Third-Party Services & Links

The cxrick platform integrates with a number of third-party services to deliver its full range of features, including game software providers (Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks), and analytics tools. Each of these third-party services operates under its own privacy policy and data practices, for which cxrick is not responsible.

cxrick selects third-party service partners carefully and requires, through contractual agreements, that partners maintain appropriate data security standards and use any player data shared with them solely for the purpose of providing services to cxrick. However, once data is transmitted to a third-party processor (for example, when your payment is handled by bKash), that processor's own privacy practices govern how your data is handled within their systems.

cxrick does not embed third-party social media widgets, advertising networks, or cross-site tracking pixels on the platform. Any links to external websites that may appear in informational content are provided for reference only; visiting those external sites is at your own discretion and subject to their own privacy policies.

10 Changes to This Policy

cxrick reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email and display a prominent notice on the platform for a reasonable period prior to the changes taking effect.

The effective date at the top of this page will be updated whenever the policy is revised. It is your responsibility to review this page periodically to stay informed of any changes. Your continued use of the cxrick platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If a proposed change to this Privacy Policy would materially affect how we use personal data you have already provided, we will seek your explicit consent before applying the new processing purpose to your existing data.

11 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cxrick handles your personal data, please contact our privacy team directly. We are committed to addressing all privacy-related enquiries promptly and transparently.

When contacting us regarding a privacy rights request, please include your full name, the email address associated with your cxrick account, and a clear description of your request. We may ask you to verify your identity before processing any request that involves access to or deletion of personal data, to ensure we are responding to the genuine account holder.

cxrick takes all privacy complaints seriously. If you submit a complaint and feel that our response does not adequately address your concern, you retain the right to escalate the matter through any applicable dispute resolution mechanism available in your jurisdiction.