crlkex Privacy Policy

1 Data We Collect

crlkex collects personal data from players in Bangladesh through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party partners who assist with identity verification and payment processing. The categories of personal data we process are set out below.

Identity & Contact Data

When you register a crlkex account, we collect your full legal name, date of birth, gender, residential address in Bangladesh (including division, district, and postal code), email address, and mobile phone number. This information is used to establish your identity, comply with our Know Your Customer (KYC) obligations, and communicate with you regarding your account.

Financial Data

To facilitate deposits and withdrawals in Bangladeshi Taka (৳), we collect the identifiers associated with your chosen payment methods. Depending on which method you use, this may include your registered bKash mobile number, Nagad account number, Rocket account details, Upay identifier, or the partial card number and expiry date of a Visa or Mastercard. crlkex does not store full card numbers on its servers — card data is tokenised at the point of input by our PCI-compliant payment partners.

Transaction Data

We maintain a complete record of all financial transactions associated with your account, including deposit amounts, withdrawal amounts, dates and times of transactions, payment methods used, and the status of each transaction. These records are held for regulatory compliance purposes and to assist with any transaction disputes you may raise.

Technical & Device Data

When you access crlkex through a web browser or mobile device, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited during each session, and session duration. This data helps us maintain platform security, detect suspicious access patterns, and optimise performance for players in Bangladesh.

Behavioural & Gaming Data

We record data about how you interact with the crlkex platform: which games you play, the frequency and duration of your sessions, your wagering patterns, the sports markets you follow and bet on, and your responses to any responsible gaming interventions offered by the platform. This data is used to personalise your experience, deliver relevant promotions, and — most importantly — to identify signs of problem gambling so that our responsible gaming team can provide appropriate support.

2 How We Use Your Data

crlkex processes personal data only for defined, lawful purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we use your personal data are as follows:

Purpose	Legal Basis	Data Categories Used
Account creation and management	Contractual necessity	Identity, contact, device data
Processing deposits and withdrawals	Contractual necessity	Financial, transaction data
Identity and age verification (KYC)	Legal obligation	Identity, document data
Anti-money laundering monitoring	Legal obligation	Financial, transaction, behavioural data
Responsible gaming monitoring	Legal obligation / Legitimate interest	Behavioural, gaming data
Fraud prevention and platform security	Legitimate interest	Technical, device, transaction data
Personalised promotions and communications	Consent	Identity, contact, behavioural data
Platform improvement and analytics	Legitimate interest	Technical, behavioural data (anonymised)
Customer support	Contractual necessity	Identity, contact, transaction data

Marketing Communications

If you have opted in to receive marketing communications from crlkex, we may contact you by email or SMS to inform you of new promotions, seasonal bonuses (such as Eid special offers or BPL cricket betting promotions), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe option included in each marketing message. Withdrawal of marketing consent does not affect your ability to use the platform or your entitlement to transactional communications related to your account.

3 Data Sharing & Disclosure

crlkex does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Processors

To process your deposits and withdrawals, crlkex shares the necessary financial identifiers with our payment processing partners. These partners include bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and the card processing networks associated with Visa and Mastercard. Each payment partner operates under its own privacy policy and is bound by contractual obligations to protect your data and use it solely for the purpose of executing your transactions.

Identity Verification Partners

crlkex uses third-party KYC service providers to verify the identity and age of players prior to processing significant withdrawals. These partners receive the identity documents and personal data you submit during the verification process and are contractually prohibited from using that data for any purpose other than completing the verification check on our behalf.

Software and Game Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game software on the crlkex platform. These providers may receive anonymised or pseudonymised session data necessary to deliver and audit their games. They do not receive your full identity or financial data unless specifically required for the operation of a game feature (such as a live table with a named player seat).

Legal and Regulatory Disclosure

crlkex will disclose personal data to law enforcement authorities, regulatory bodies, or courts if required to do so by applicable law, by valid legal process, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of crlkex, our players, or the public. We will, where legally permitted, notify affected players of any such disclosure.

Business Transfers

In the event that crlkex undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account, and your data will continue to be governed by a privacy policy that offers at least equivalent protections to this one.

4 Cookies & Tracking

The crlkex platform uses cookies and similar tracking technologies to operate core site functionality, maintain session security, and analyse platform performance. A cookie is a small text file placed on your device by a web server. The cookies we use fall into the following categories:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, protect against cross-site request forgery, and enable secure payment flows. You cannot opt out of strictly necessary cookies without disabling the platform entirely, as they are integral to its operation.

Performance and Analytics Cookies

We use anonymised analytics cookies to understand how players navigate the crlkex platform — which pages are most visited, where users drop off, and how long they spend on each section. This data is used exclusively to improve platform design and user experience. No personally identifiable information is included in analytics cookie data.

Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method, your last-visited game category, and any accessibility settings you have applied — so that you do not need to reconfigure these on each visit.

Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to refuse all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling certain functional cookies may affect your experience on the crlkex platform. Your browser provider's help documentation will include instructions specific to your browser version.

5 Data Security

crlkex implements a layered, defence-in-depth approach to the security of your personal and financial data. Our security measures include, but are not limited to, the following controls:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the crlkex platform is encrypted using TLS 1.3, the current industry standard for secure web communications. This ensures that login credentials, payment details, and personal information cannot be intercepted in transit.
• Database Encryption: Sensitive data fields stored in our databases — including identity documents and payment method identifiers — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorised crlkex personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Payment Card Tokenisation: Card payment data is tokenised at the point of input by our PCI-DSS-compliant payment processors. crlkex servers never store raw card numbers.
• Intrusion Detection: Our platform is monitored 24/7 for suspicious access patterns, brute-force login attempts, and other indicators of compromise. Automated alerts trigger immediate investigation by our security team.
• Password Hashing: Player account passwords are stored as salted cryptographic hashes. Even in the highly unlikely event of a data breach, your plain-text password would not be exposed.

While crlkex takes all reasonable and industry-standard measures to protect your data, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a material risk to affected players, crlkex will notify those players as promptly as practicable and will provide clear guidance on any steps they should take to protect themselves.

6 Data Retention

crlkex retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and responsible gaming obligations. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Account and identity data	5 years post-account closure	AML record-keeping obligations
Financial transaction records	5 years post-transaction	Financial audit and AML compliance
KYC documents	5 years post-account closure	Regulatory identity verification records
Responsible gaming records	5 years post-account closure	Player protection audit trail
Marketing preferences	Until consent is withdrawn	Consent-based processing
Technical / session logs	13 months	Security monitoring and fraud detection
Customer support communications	3 years post-resolution	Dispute resolution reference

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

7 Your Privacy Rights

As a crlkex player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and provide sufficient detail for us to identify your account and understand your request.

Right of Access

You have the right to request a copy of all personal data that crlkex holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request. There is no charge for a first access request in any 12-month period; subsequent requests within the same period may be subject to a reasonable administrative fee.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action verified correction requests within 15 business days. Some corrections — particularly to name or date of birth — may require supporting documentary evidence before they can be applied.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to our overriding legal obligations — we cannot delete data that we are legally required to retain for AML or responsible gaming record-keeping purposes, as described in the Data Retention section above.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we temporarily restrict our processing of your personal data while the issue is being investigated. During a restriction period, we will continue to store the data but will not use it for any active processing purpose.

Right to Data Portability

Where processing is carried out on the basis of your consent or on the basis of contractual necessity, and where the processing is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.

Right to Withdraw Consent

Where crlkex processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

8 Contact & DPO

crlkex is committed to the transparent and responsible handling of personal data. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which crlkex processes your personal data, please contact us using the details below.

General Privacy Enquiries

For general privacy questions, data subject rights requests, or to report a suspected data protection issue, please contact our support team at [email protected] with the subject line "Privacy Enquiry". Our team is available 24 hours a day, 7 days a week, and operates in both English and Bengali.

Policy Updates

crlkex reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features available on the platform. When material changes are made, we will notify registered players by email to the address on file at least 14 days before the updated policy takes effect. The "Last Revised" date at the top of this page will always reflect the most recent update. We encourage you to review this page periodically to stay informed about how crlkex protects your privacy.

Continued use of the crlkex platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.