crikey Privacy Policy
At crikey, your privacy is a fundamental priority. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information as a player on the crikey platform.
How crikey Protects Your Data
These cards summarise our core privacy commitments. The full detail for each commitment is set out in the corresponding section below.
Minimal Data Collection
crikey collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with our international gaming licence obligations. We do not collect data for its own sake.
256-bit SSL Encryption
All data transmitted between your device and crikey's servers is protected by industry-standard 256-bit SSL/TLS encryption. Payment credentials — including your bKash, Nagad, and Rocket wallet details — are never stored on crikey's own servers.
No Data Sold to Third Parties
crikey does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Data is shared only with vetted service partners (e.g., game providers, payment processors) under strict data processing agreements.
Defined Retention Periods
crikey retains your personal data only for as long as required by our licence obligations and applicable law — typically no longer than 5 years after account closure. Upon expiry of the retention period, data is securely and permanently deleted.
Full Cookie Control
crikey uses only functional and analytics cookies that are necessary for the Platform to operate correctly and to improve user experience. You can manage non-essential cookie preferences through your browser settings at any time.
Your Rights Are Respected
As a crikey player, you have the right to access, correct, export, and request deletion of your personal data at any time. All privacy rights requests are handled by the crikey Data Protection team and responded to within 30 days.
Section 01 Information We Collect
When you register and use the crikey Platform, we collect personal information that falls into the following categories. Each category lists the specific data points collected, the reason we collect them, and the legal basis under which processing takes place.
1.1 Registration and Identity Data
When you create a crikey account, we collect your full legal name, date of birth, email address, mobile phone number (used as your primary account identifier), and your residential address. This information is required to open your account, verify that you meet the minimum age requirement of 18 years, and fulfil our Know Your Customer (KYC) obligations under our international gaming licence. The legal basis for processing this data is contractual necessity and legal obligation.
1.2 Identity Verification Documents
As part of the KYC process required before your first withdrawal, we collect copies of government-issued identification documents. Accepted documents include your Bangladesh National Identity Card (NID), valid passport, or government-issued driving licence. We also collect proof of address (e.g., a recent utility bill or bank statement) and confirmation of your registered mobile wallet (bKash, Nagad, Rocket, or Upay) account details. These documents are processed solely for identity verification and fraud prevention purposes and are stored in encrypted form.
1.3 Financial Transaction Data
We record details of every deposit and withdrawal transaction conducted through your crikey account. This includes the transaction amount in Bangladesh Taka (৳), the payment method used (e.g., bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard), the timestamp of the transaction, and a transaction reference number. We do not store your full card number, mobile wallet PIN, or any other payment authentication credential on our servers. All payment processing is handled through PCI-DSS compliant third-party gateway partners.
1.4 Gaming Activity Data
We record a complete history of your gameplay on the crikey Platform, including games played, bet amounts, game outcomes, session start and end times, and bonus usage. This data serves multiple purposes: it enables dispute resolution, allows us to calculate bonus wagering progress, supports responsible gaming monitoring (e.g., detecting patterns that may indicate problem gambling), and is required for our gaming licence audit obligations.
1.5 Technical and Device Data
When you access the crikey Platform, our servers automatically log certain technical information about your connection. This includes your IP address, device type and operating system, browser type and version, screen resolution, referring URL (the page you visited immediately before crikey), and the pages you visit within the Platform along with timestamps. This technical data is used for security monitoring, fraud detection, and Platform performance optimisation. It is not used to build advertising profiles.
1.6 Communications Data
If you contact the crikey support team via email or live chat, we retain records of that correspondence. This includes the content of your messages, any attachments you send, and our responses. Communication records are kept for a period of 3 years to support ongoing customer service, dispute resolution, and regulatory audit requirements.
Data minimisation principle: crikey applies the principle of data minimisation — we collect the minimum amount of personal data necessary for each stated purpose. If you believe we are collecting data beyond what is described in this section, please contact our Data Protection team at [email protected].
1.7 Data Collected from Third Parties
In limited circumstances, crikey may receive personal data about you from third parties. This includes identity verification data from licensed KYC service providers (to cross-check the documents you submit), fraud risk scores from payment fraud prevention services, and, where applicable, self-exclusion status information from responsible gaming registers to which crikey is connected. We use third-party sourced data only for the specific purpose for which it was obtained and do not merge it with your profile for any unrelated purpose.
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity Data | Full name, date of birth, NID, email, mobile number | Contractual necessity; Legal obligation (KYC) |
| Financial Data | Transaction amounts, payment method, timestamps | Contractual necessity; Legal obligation (AML) |
| Gaming Activity | Bets, game outcomes, session history, bonuses | Contractual necessity; Legitimate interests |
| Technical Data | IP address, device type, browser, access logs | Legitimate interests (security, fraud prevention) |
| Communications | Support emails, live chat transcripts | Contractual necessity; Legitimate interests |
| Third-Party Data | KYC verification results, fraud scores | Legal obligation; Legitimate interests |
Section 02 How We Use Your Data
crikey uses your personal data for the following specific and limited purposes. We do not use your data for any purpose that is incompatible with the purposes listed here. Where we wish to use your data for a new purpose in the future, we will update this Privacy Policy and notify registered players by email before any new processing begins.
2.1 Account Management and Service Delivery
Your identity, contact, and financial data are used to create and maintain your crikey account, process your deposits and withdrawals, calculate your real-money and bonus balances, record your gaming history, and provide you with access to all crikey Platform features. This is the core contractual purpose for which your data is processed, and it is not possible to offer crikey services without it.
2.2 Identity Verification and Fraud Prevention
Your KYC documents and transaction data are used to verify your identity, confirm that you meet the minimum age requirement of 18 years, prevent the use of stolen payment credentials, detect money laundering and suspicious financial activity, and flag accounts that may be operated by the same individual using different details. Fraud prevention is a legitimate interest of crikey and is also a legal obligation under our gaming licence.
2.3 Responsible Gaming Monitoring
crikey uses your gaming activity data — including session frequency, session duration, bet size relative to deposit history, and loss patterns — to proactively monitor for signs of problem gambling behaviour. Where our responsible gaming algorithms flag a potential concern, the crikey player protection team may reach out to you by email to offer support resources. This processing is conducted as a legitimate interest of crikey and in the interest of player welfare.
2.4 Regulatory Compliance and Legal Obligations
crikey is required to retain certain categories of your personal data by our international gaming licence, anti-money laundering regulations, and other applicable legal obligations. This includes complete transaction records, KYC documentation, and gaming activity logs. These records may be provided to our licensing authority or to law enforcement agencies where we receive a valid legal request. crikey will notify you of any such disclosure where legally permitted to do so.
2.5 Platform Security and Technical Operations
Your technical and device data (IP address, device fingerprint, browser details) is used to protect the crikey Platform against cyberattacks, detect unauthorised account access, enforce geographic restrictions where applicable, prevent automated bot activity, and maintain the stability and performance of the Platform for all players.
2.6 Customer Support
Your communications data — including support emails and live chat transcripts — is used to resolve your queries, investigate complaints, and improve the quality of crikey's customer service. Support staff access only the minimum data necessary to resolve each specific query. All support interactions are logged for quality assurance and dispute resolution purposes.
2.7 Marketing Communications
With your explicit consent, crikey may send you promotional emails about new games, seasonal offers (such as those tied to BPL, IPL, Eid, or Pohela Boishakh), deposit bonuses, and platform updates. You may withdraw your consent to marketing communications at any time by clicking the "Unsubscribe" link in any crikey marketing email, or by emailing [email protected] with the subject line "Marketing Opt-Out". Withdrawing consent to marketing does not affect the processing of your data for any other purpose listed in this section.
We do not use your data for automated individual decision-making that produces legal or similarly significant effects, except for the automated fraud screening that takes place during account registration and payment processing. If you believe an automated decision has been applied to your account incorrectly, you have the right to request human review by contacting [email protected].
Section 03 Data Sharing and Disclosure
crikey does not sell, rent, or trade your personal information to any third party for their own commercial purposes. We share your personal data only in the specific circumstances described in this section, and only to the extent strictly necessary for each stated purpose.
3.1 Game Technology Providers
To deliver the games available on the crikey Platform, we share limited game session data with our third-party game technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. The data shared is limited to what is necessary for the game software to function — typically a session token, your bet history within the current session, and your account currency. These providers are contractually prohibited from using your data for any purpose beyond delivering the game service to crikey.
3.2 Payment Processing Partners
To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard, we share your transaction request details with our licensed payment processing partners. The data shared includes the transaction amount, your registered mobile number or payment reference, and a crikey transaction ID. Full payment credentials (e.g., card numbers, mobile wallet PINs) are handled exclusively by the payment provider and are never transmitted to or stored on crikey servers.
3.3 Identity Verification Services
To complete the KYC verification process, crikey works with licensed third-party identity verification service providers. Your submitted identity documents (NID, passport, proof of address) may be shared with these providers in encrypted form for the purpose of document authenticity checking and database cross-referencing. All identity verification partners are bound by strict data processing agreements and are prohibited from retaining your documents beyond the verification period.
3.4 Legal and Regulatory Disclosure
crikey may disclose your personal data to its gaming licence authority, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory request. crikey will notify you of any such disclosure wherever legally permitted, unless doing so would compromise an active investigation or is prohibited by law.
3.5 Business Transfers
In the event that crikey undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, crikey will notify affected players by email at least 30 days before any such transfer takes place, and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.
International data transfers: Some of crikey's service partners are based outside Bangladesh. Where your personal data is transferred internationally, crikey ensures that appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to ensure your data receives an equivalent level of protection regardless of where it is processed.
Section 05 Data Retention and Deletion
crikey retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by our gaming licence and applicable law. The following retention periods apply to each data category.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account / Identity Data | 5 years after account closure | Gaming licence obligation; AML compliance |
| KYC Documents | 5 years after account closure | Legal obligation; regulatory audit requirements |
| Financial Transaction Records | 7 years after account closure | AML / financial crime prevention legislation |
| Gaming Activity Logs | 5 years after account closure | Gaming licence audit trail; dispute resolution |
| Support Communications | 3 years after last interaction | Dispute resolution; quality assurance |
| Marketing Consent Records | 3 years after consent withdrawn | Demonstrating compliance with consent obligations |
| Technical / Access Logs | 12 months from creation | Security monitoring; fraud investigation |
| Analytics / Cookie Data | Up to 24 months | Platform performance improvement |
5.1 Deletion Process
Upon expiry of the applicable retention period, crikey permanently and securely deletes or anonymises your personal data from all active systems and backups. Anonymised data — from which it is no longer possible to identify you — may be retained indefinitely for aggregated statistical purposes (e.g., calculating platform-wide game return-to-player rates). Anonymisation is irreversible; once data has been anonymised, it cannot be re-linked to you.
5.2 Requesting Early Deletion
You may request the deletion of your personal data at any time by emailing [email protected] with the subject line "Data Deletion Request". Please note that crikey is not able to delete data that it is legally required to retain under its gaming licence or applicable anti-money laundering law, regardless of your request. We will inform you clearly which data can be deleted immediately and which must be retained and for how long.
Section 06 Security of Personal Data
crikey implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. While no digital system can guarantee absolute security, crikey applies industry-leading standards and continuously reviews its security posture to respond to evolving threats.
6.1 Technical Security Measures
- Transport Encryption: All data transmitted between your device and crikey servers is encrypted using TLS 1.2 or higher (256-bit SSL). The crikey.vip domain enforces HTTPS at all times — unencrypted HTTP connections are automatically redirected.
- Data at Rest Encryption: Sensitive personal data stored in crikey's databases — including identity documents and KYC records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within crikey's internal systems is restricted to authorised staff on a strict need-to-know basis. All internal access is logged and subject to regular audit.
- Two-Factor Authentication: crikey's internal administrative systems require two-factor authentication (2FA) for all staff who access player personal data.
- Penetration Testing: crikey commissions independent security penetration tests of the Platform at least once per year, with critical vulnerabilities remediated within 72 hours of discovery.
- Payment Security: Payment processing is handled by PCI-DSS Level 1 compliant payment gateway partners. crikey does not store card numbers, CVV codes, mobile wallet PINs, or other payment authentication credentials on its own servers at any point.
6.2 Organisational Security Measures
All crikey staff who handle personal data receive mandatory privacy and data security training on commencement of employment and annually thereafter. crikey maintains an internal data breach response plan that specifies the steps to be taken in the event of a data security incident, including notification timelines for affected players and regulatory authorities where required by law.
6.3 Data Breach Notification
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, crikey will notify all affected registered players at their registered email address within 72 hours of becoming aware of the breach, unless the breach affects data that was encrypted and therefore remains protected. The notification will describe the nature of the breach, the categories of data affected, the steps crikey has taken to address it, and guidance on any steps you should take to protect yourself.
Your responsibility: Account security also depends on your actions. Use a strong, unique password for your crikey account. Do not share your login credentials with anyone. If you suspect your account has been accessed without your permission, contact [email protected] immediately. crikey will never ask for your full password in any communication.
Section 07 Your Privacy Rights
As a crikey player, you have a set of clearly defined rights in relation to your personal data. crikey is committed to honouring these rights promptly and transparently. All privacy rights requests are handled by the crikey Data Protection team and will receive a response within 30 calendar days of receipt.
7.1 Right of Access
You have the right to request a copy of all personal data that crikey holds about you. Upon receiving a verified access request, crikey will provide you with a structured, readable summary of your data — including the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared — within 30 days. There is no fee for a first access request within any 12-month period.
7.2 Right to Rectification
If any personal data held on your crikey account is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly within your account settings. For changes to identity data (such as your registered name following a legal name change), please contact [email protected] with supporting documentation.
7.3 Right to Erasure ("Right to Be Forgotten")
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where you have objected to processing and crikey has no overriding legitimate interest. As noted in Section 5.2, crikey cannot delete data it is legally required to retain. We will explain clearly what can be deleted and what must be kept when processing your erasure request.
7.4 Right to Restriction of Processing
You have the right to request that crikey restricts the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request, or while an objection to processing is being considered. During a restriction period, crikey may continue to store your data but will not actively use it for any purpose beyond storage and the limited purposes permitted by applicable law.
7.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV). You may also request that crikey transmit your data directly to another controller where technically feasible. To submit a data portability request, email [email protected] with the subject line "Data Portability Request".
7.6 Right to Object
You have the right to object to the processing of your personal data where that processing is based on crikey's legitimate interests (including profiling for responsible gaming monitoring and fraud prevention). Upon receiving a valid objection, crikey will cease processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims. You may also object to the processing of your data for direct marketing purposes at any time, with immediate effect.
7.7 Rights Related to Automated Decision-Making
Where crikey uses automated processes that make decisions with significant effects on you — such as the automated fraud screening applied during account registration or the responsible gaming monitoring system — you have the right to request human review of any such automated decision, to express your point of view, and to contest the outcome. To exercise this right, contact [email protected] with full details of the decision you wish to contest.
7.8 How to Exercise Your Rights
To exercise any of the rights described in this section, please send a written request to the crikey Data Protection team at [email protected] with the subject line "Privacy Rights Request". To protect your security, crikey may ask you to verify your identity before processing your request. We will respond to all verified requests within 30 calendar days. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you within the initial 30-day period and explain the reason for the extension.
No retaliation for exercising privacy rights: crikey will not penalise, restrict, or disadvantage your account in any way as a result of you exercising your privacy rights. The service you receive from crikey will remain exactly the same whether or not you choose to exercise any right described in this section.
Section 08 Contact and Complaints
crikey takes all privacy concerns seriously. If you have a question about this Privacy Policy, wish to exercise a data subject right, or want to report a privacy concern, the crikey Data Protection team is your primary point of contact.
8.1 Contacting the crikey Data Protection Team
All privacy-related enquiries, rights requests, and complaints should be directed to the crikey Data Protection team. The preferred contact channel is email. Please include your registered account username and a clear description of your query or request to allow us to respond as efficiently as possible.
Data Protection Contact: [email protected]
Subject line format: "Privacy Rights Request" / "Data Deletion Request" / "Privacy Complaint" / "Cookie Query"
Response time: Within 30 calendar days of receiving a verified request.
8.2 Privacy Complaints
If you are not satisfied with the way in which crikey has handled your personal data, or if you believe crikey has not adequately responded to a privacy rights request, you have the right to lodge a formal complaint with the crikey Data Protection team at the address above. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.
8.3 Updates to This Privacy Policy
crikey reviews and, where necessary, updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or changes to the crikey Platform. When material changes are made to this Privacy Policy, we will notify all registered players at their registered email address at least 14 days before the updated policy takes effect. The "Effective Date" displayed at the top of this page and in the hero section of this page will be updated to reflect the date on which the most recent version of the policy came into force. Continued use of the crikey Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms.
8.4 Governing Language
This Privacy Policy is written in English. In the event of any inconsistency between the English version and any translated version of this document, the English version shall prevail. The English version is the legally binding version for all purposes.
Policy version information: This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions of the crikey Privacy Policy. Players who registered before this date should note that this updated policy applies to all data held from the date it comes into effect.
Your Data Is Safe. Now Let's Play.
crikey is committed to protecting your privacy so you can focus on what matters — enjoying Bangladesh's most exciting online casino and sports betting experience. Explore our games or get answers to common questions below.