Privacy Policy — 4crickex

4crickex collects personal data from players and visitors through several channels: directly when you register an account, make a deposit, place a bet, or contact support; automatically when you browse the platform via cookies and server logs; and through third-party payment providers during deposit and withdrawal processing. The following table outlines the categories of personal data we collect, why we collect each category, and the legal basis for processing.

4crickex does not knowingly collect personal data from any individual under the age of 18. If we become aware that personal data has been collected from an underage user, we will immediately delete that data and permanently close the associated account.

4crickex uses the personal data we collect solely for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those described below. The primary purposes for which we process your personal data are:

• Account Management: Creating and maintaining your registered 4crickex account, verifying your identity and age during KYC, managing account security, and processing your login sessions.
• Service Delivery: Processing your bets on cricket markets and casino games, crediting winnings to your account balance, managing bonus credit and wagering requirements, and operating the Treasure Hunt rewards programme.
• Payment Processing: Facilitating deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank transfer methods. Verifying that payment accounts belong to the registered account holder to prevent third-party transactions.
• Responsible Gaming: Monitoring betting patterns and session behaviour to identify potential signs of problem gambling, administering self-exclusion requests, enforcing deposit limits, and sending responsible gaming reminders where our systems flag elevated risk activity.
• Fraud and AML Prevention: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, match fixing, money laundering, and other fraudulent or illegal activities on the platform.
• Customer Support: Responding to your support queries, resolving betting disputes, investigating complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, identify bugs, and develop new features and betting markets of interest to players in Bangladesh.
• Legal Compliance: Fulfilling obligations under applicable regulations, responding to lawful requests from regulatory or law enforcement authorities, and retaining records as required by applicable data retention laws.
• Marketing Communications: Sending promotional offers, bonus notifications, and event alerts (such as BPL season promotions or Eid special offers) to players who have opted in to marketing communications. You can opt out at any time by updating your communication preferences in account settings or by contacting support.

4crickex does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, to operate the platform and deliver our services, we share specific categories of personal data with the following trusted third parties, each of whom is contractually bound to use your data only for the specific purposes described and to maintain appropriate security standards:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive your payment account reference and transaction amounts solely to process deposit and withdrawal instructions. These providers operate under their own published privacy policies and are regulated financial service providers in Bangladesh.
• KYC and Identity Verification Partners: Where automated KYC document verification is used, your National ID or passport image may be processed by a third-party identity verification service operating under strict data processing agreements. These services do not retain your document images after the verification check is completed.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier and bet history data necessary to deliver their game content and validate RNG outcomes. These providers do not receive your name, contact details, or payment information.
• Platform Technology Partners: Hosting providers, content delivery network (CDN) operators, and security infrastructure providers who process technical data (such as IP addresses and server logs) as a necessary part of delivering and protecting the 4crickex platform. All such providers are contractually bound by data processing agreements.
• Regulatory and Law Enforcement Authorities: 4crickex may disclose personal data to relevant governmental, regulatory, or law enforcement bodies in Bangladesh or other applicable jurisdictions where we are required to do so by law, court order, or for the prevention and detection of fraud, money laundering, or other serious criminal activity.

International Data Transfers: Some of our technology partners and game content providers may process data on servers located outside Bangladesh. Where data is transferred internationally, we ensure that such transfers are protected by appropriate contractual safeguards, including data processing agreements that require the recipient to maintain data protection standards equivalent to those described in this Privacy Policy.

4crickex uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform, maintain your login session, and improve performance. We do not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies from social media platforms.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your security settings, and enable core features such as the betting slip, deposit flow, and responsible gaming tools. These cookies cannot be disabled without impairing your ability to use 4crickex. They are session cookies and are deleted when you close your browser or log out.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use 4crickex — such as which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance and is not linked to any individual player's identity.
• Functional Cookies: These cookies remember your platform preferences, such as your chosen display settings, notification preferences, and responsible gaming configuration. They persist across sessions to provide a consistent experience each time you visit 4crickex.
• Security Cookies: Short-lived cookies used to help detect and prevent fraudulent login attempts, session hijacking, and CSRF (Cross-Site Request Forgery) attacks. These are strictly necessary for platform security and operate invisibly in the background.

Managing Cookies: You can configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the core betting and casino features of 4crickex. Instructions for managing cookies are available in your browser's help documentation. Disabling performance cookies will not impair your ability to use the platform.

4crickex takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and 4crickex servers is encrypted using TLS 1.2 or TLS 1.3 protocols with 256-bit AES encryption. Our domain enforces HTTPS at all times; plain HTTP access is automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data fields — including identity document references, payment account identifiers, and KYC verification records — are stored in encrypted form in our database. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data held by 4crickex is strictly limited to authorised personnel who require it to perform specific operational roles (such as KYC review, AML investigation, or customer support). All internal data access is logged and auditable.
• Password Security: Player passwords are hashed using a strong one-way cryptographic algorithm (bcrypt with salt). 4crickex staff cannot view or retrieve your password — if lost, it must be reset through the secure password-reset flow.
• Intrusion Detection and Monitoring: 4crickex employs real-time server monitoring, anomaly detection systems, and rate-limiting on login and API endpoints to detect and block brute-force attacks, credential stuffing, and other automated threats.
• Penetration Testing and Security Audits: Our platform undergoes periodic security assessments by independent security specialists. Identified vulnerabilities are remediated according to a prioritised patch management process.

Your Responsibility: While we take every reasonable step to protect your data on our end, you also play an important role in keeping your account secure. Please use a strong and unique password for your 4crickex account, enable two-factor authentication (2FA) where available, never share your login credentials with anyone, and log out of your account when accessing 4crickex from a shared or public device.

As a player on 4crickex, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via in-platform live chat or by emailing support@4crickex. We will respond to all valid data rights requests within 30 days of receipt.

Please note that certain rights — particularly the right to erasure — may be limited where 4crickex has a legal obligation to retain specific data for a defined minimum period (for example, financial transaction records required under AML regulations). Where a request cannot be fulfilled in full, we will explain the specific legal reason for any limitation.

4crickex retains your personal data for as long as your account is active and for a defined period after account closure, as set out below. Our retention periods are determined by the purpose for which each data category was collected and by applicable legal and regulatory obligations.

• Account and Identity Data: Retained for the full duration of your account's active life, plus a minimum of 5 years following account closure. This retention period is required for AML record-keeping and for the resolution of any post-closure disputes or regulatory inquiries.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in line with financial record-keeping requirements applicable to online payment processing in Bangladesh. This includes all deposit and withdrawal records denominated in ৳ BDT.
• Betting Activity Data: Retained for the full duration of your account's active life, plus a minimum of 3 years following account closure for dispute resolution, audit, and responsible gaming monitoring purposes.
• KYC Verification Documents: Document images (NID or passport scans) submitted for KYC verification are retained for the full duration of your account's active life, plus 5 years following account closure, as required by AML compliance obligations.
• Support Communications: Live chat transcripts and support email records are retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical Logs: Server access logs and security event logs are retained for a rolling period of 12 months and are then automatically deleted. Anonymised, aggregated analytics data derived from technical logs may be retained indefinitely as it cannot be linked to any individual.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained for 3 years following the date of the request to demonstrate compliance with consent obligations.

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregate data that cannot identify any individual may be retained indefinitely for statistical analysis and platform improvement purposes.

4crickex reserves the right to update or revise this Privacy Policy at any time. Changes may be made in response to new legal or regulatory requirements, changes in our data processing practices, the introduction of new platform features, or feedback from our players and data protection advisors.

When material changes are made to this Privacy Policy, we will notify all registered players via email to their registered address and by displaying a prominent notice on the 4crickex platform for a minimum of 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 4crickex platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should immediately cease using the platform and contact us to request account closure and, where applicable, deletion of your personal data.

We encourage all players to review this Privacy Policy periodically to stay informed about how 4crickex protects and uses your personal information. If you have any questions about this policy or our data practices at any time, please do not hesitate to contact our support team — details are provided throughout this document and in the Contact & Support section of the site footer.

This Privacy Policy is governed by and construed in accordance with applicable laws and regulations. By using the 4crickex platform, you consent to the data practices described in this policy as it stands at the time of your visit or transaction.