crik7 Privacy Policy

Introduction

crik7 ("we", "us", "the Platform") is committed to protecting and respecting the privacy of all individuals who access or use https://crik7.org. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by crik7. Please read this Policy carefully before using crik7.

By registering an account, making a deposit, or otherwise using crik7, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy applies to all Players located in or accessing the Platform from Bangladesh and is consistent with applicable data protection principles.

Information We Collect

We collect and process personal data in three categories: information you provide directly, information collected automatically, and information received from third parties. The scope and nature of data collected depends on how you use crik7.

Information You Provide Directly

• Registration data: full name, date of birth, email address, phone number, and residential address (city, district, postal code) at the time of account creation.
• Identity verification documents: national ID card, passport, or driving licence as part of our KYC process.
• Financial information: payment method details (bKash number, Nagad number, Rocket number, bank account number) used for deposits and withdrawals. crik7 does not store full card numbers.
• Communications: messages and attachments sent to crik7 via email, live chat, or support ticket system.
• Preferences and settings: language preference, notification settings, and responsible gaming limits you configure in your account.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: pages visited, time spent on each section, betting activity, game history, deposit and withdrawal history, session duration, and click patterns.
• Location data: approximate geographic location derived from your IP address. crik7 does not collect precise GPS coordinates.
• Cookie data: session identifiers, preference cookies, and analytics identifiers as described in Section 6 of this Policy.

Information from Third Parties

• Payment processors: transaction confirmation data, fraud scoring flags, and payment status updates from bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification services: results of document verification checks conducted by our KYC compliance provider.
• Anti-fraud and risk partners: device fingerprint scores and behavioural risk signals used to protect the Platform and its Players from fraudulent activity.

How We Use Your Information

crik7 uses your personal data only for clearly defined purposes. The table below summarises each purpose and the data categories involved:

Legal Basis for Processing

crik7 processes your personal data on the following legal bases, which we apply on a purpose-by-purpose basis:

• Contractual necessity — processing required to register your account, execute bets, process payments, and provide customer support as agreed under our Terms & Conditions.
• Legal obligation — processing required to comply with anti-money laundering, KYC, age verification, and other applicable legal requirements.
• Legitimate interests — fraud detection, platform security, responsible gaming monitoring, and service improvement analytics conducted in a way that does not override your fundamental privacy rights.
• Consent — where we send you optional promotional communications by email or push notification, we do so only with your express prior consent. You may withdraw consent at any time by updating your account notification preferences or contacting [email protected].

Sharing Your Data

crik7 does not sell, rent, or trade your personal data to third parties. We share data only where strictly necessary and under appropriate data protection safeguards with the following categories of recipients:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive the minimum data required to process your deposit or withdrawal transaction.
• KYC and identity verification providers — third-party KYC compliance partners who verify the authenticity of identity documents submitted during account registration or periodic review.
• Fraud prevention and security services — specialist providers who process device fingerprint data and behavioural signals to identify and prevent fraudulent activity on crik7.
• Law enforcement and regulatory authorities — where crik7 is required by applicable law, court order, or regulatory direction to disclose personal data, we will do so and will attempt to notify you in advance unless prohibited from doing so.

Cookies and Tracking

crik7 uses cookies and similar technologies to operate the Platform, remember your preferences, and understand how visitors use the site. We use only the categories of cookies described below — we do not use cross-site advertising trackers or third-party behavioural profiling cookies.

Cookie Categories We Use

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core functionality.
• Preference cookies — store your language selection (English or Bengali), display settings, and responsible gaming notification preferences so you do not need to re-configure them on every visit.
• Analytics cookies — aggregate, anonymised data about how pages are used, which game categories are most visited, and session funnel analysis. This data does not identify you personally and is used solely to improve crik7's design and content.
• Security cookies — short-lived tokens used to detect and mitigate bot activity, credential stuffing, and brute-force login attempts against player accounts.

You may manage cookie preferences through your browser settings. Disabling preference or analytics cookies will not prevent you from using crik7, but some personalisation features may not function as intended. Strictly necessary cookies cannot be blocked without disrupting Platform functionality.

Data Retention

crik7 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Our standard retention periods are:

• Active account data — retained for the duration of your account plus 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents — retained for 5 years from the date of verification or account closure, whichever is later, in compliance with applicable financial regulations.
• Support communications — retained for 3 years from the date of last contact, after which they are anonymised or securely deleted.

Your Rights Over Your Data

Subject to applicable law, you have the following rights in relation to the personal data crik7 holds about you. To exercise any of these rights, contact us at [email protected] with your registered account email address and the specific right you wish to exercise:

• Right of access — request a copy of all personal data crik7 holds about you, including the categories of data, the purposes of processing, and any third parties with whom data has been shared.
• Right to rectification — request correction of inaccurate or incomplete personal data. You may also update your own contact details directly through account settings.
• Right to erasure — request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to crik7's legal retention obligations.
• Right to restrict processing — request that crik7 limits how it uses your personal data while a dispute about accuracy or lawfulness is resolved.
• Right to data portability — request a structured, machine-readable copy of the personal data you have provided to crik7, in a format suitable for transfer to another service provider.
• Right to object — object to processing carried out on the basis of legitimate interests. crik7 will consider your objection and cease processing unless compelling legitimate grounds exist that override your interests, rights, and freedoms.

Security Measures

crik7 implements technical and organisational security measures appropriate to the risk posed by processing your personal data. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls restricting internal data access to authorised personnel only, regular security audits and penetration testing of Platform infrastructure, and two-factor authentication options for player accounts.

While crik7 takes all reasonable precautions, no method of data transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, crik7 will notify you without undue delay in accordance with applicable notification obligations.

Children and Minors

crik7 strictly prohibits use of the Platform by anyone under 21 years of age. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on crik7, please contact [email protected] immediately.

Third-Party Links and Services

crik7 may display content from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi within the Platform. These providers operate their own privacy practices. crik7 is not responsible for the data practices of third-party game providers and recommends that you review their respective privacy policies. crik7 does not control third-party data processing that occurs within embedded game sessions.

Changes to This Privacy Policy

crik7 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will update the effective date at the top of this page and, where practicable, notify registered Players by email. The most current version of this Policy is always available at https://crik7.org/privacy-policy.

Your continued use of crik7 after a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with the changes, you may request account closure by writing to [email protected].