Privacy Policy — cruckex

1. Data We Collect

1.1 Information You Provide Directly

When you register an account, make deposits, request withdrawals, or contact our support team, cruckex collects the following categories of personal data:

1.2 Information Collected Automatically

When you access and use the cruckex Platform, certain technical data is collected automatically by our systems. This includes:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths through the Platform
• Session timestamps, login and logout times
• Game and betting activity logs, including stake amounts, game selections, and outcomes
• Referral source (how you arrived at the Platform, if applicable)

This automatically collected data is used primarily for security monitoring, fraud detection, platform performance optimisation, and responsible gaming analysis. It does not, on its own, identify you by name.

1.3 Information from Third Parties

In certain circumstances, cruckex may receive information about you from third-party sources. This is limited to the following scenarios:

• Payment Processors: When you deposit or withdraw via bKash, Nagad, or Rocket, our payment gateway partners may pass back transaction confirmation data, including the registered mobile number associated with the transaction, to verify that the payment source matches your cruckex account.
• Identity Verification Services: Where automated identity checks are used as part of the KYC process, a third-party verification provider may return a pass, fail, or refer result to cruckex. We do not retain raw biometric data in this process.
• Fraud Prevention Partners: cruckex may receive risk signals or flagged data points from fraud screening services where a transaction or account activity pattern has been identified as potentially suspicious.

2. How We Use Your Data

cruckex processes your personal data for the following purposes. For each purpose, a lawful basis for processing exists, as set out below:

2.1 Account Management and Service Delivery

The primary purpose for which cruckex processes your data is to create and manage your player account, process your deposits and withdrawals in BDT, provide access to casino games and cricket betting markets, deliver customer support, and send you essential service communications such as transaction confirmations and security alerts. This processing is necessary to fulfil the contractual relationship between you and cruckex.

2.2 Identity Verification and KYC Compliance

cruckex is obligated to verify the age and identity of all players before permitting withdrawals or raising account limits. Personal identity data and verification documents are processed for the purpose of confirming that you are at least 18 years of age and that the payment methods you use are registered in your name. This processing is carried out in accordance with our responsible gaming obligations and anti-money laundering commitments.

2.3 Fraud Prevention and Security

cruckex continuously monitors account activity, transaction patterns, and login behaviour to detect and prevent fraud, money laundering, match-fixing, account takeovers, and other prohibited activities. Automated systems and manual review processes both form part of this activity. Where suspicious activity is detected, your account may be suspended pending investigation, and relevant data may be preserved for the duration of that investigation.

2.4 Responsible Gaming Monitoring

cruckex uses your betting history, deposit patterns, session duration data, and account activity to identify indicators of problem gambling behaviour. Where such indicators are detected, cruckex may proactively contact you to offer responsible gaming tools, apply mandatory deposit limits, or restrict access to certain features. This processing reflects our genuine commitment to player welfare and is not used for marketing profiling.

2.5 Platform Improvement and Analytics

Anonymised and aggregated data about how players interact with the cruckex Platform is used to improve site performance, prioritise feature development, and enhance the overall user experience. This analytics processing does not involve personally identifiable information and does not result in any decision that affects your individual account.

2.6 Marketing Communications

Where you have explicitly opted in to receive promotional communications from cruckex, we may send you information about new games, seasonal offers (such as BPL season promotions or Eid bonus campaigns), and platform updates. You can withdraw this consent at any time by contacting support@cruckex or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect your ability to use the Platform.

3. Data Sharing & Disclosure

cruckex does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

3.1 Payment Service Providers

To process your deposits and withdrawals, cruckex shares the minimum necessary transaction data with our payment gateway partners, including bKash, Nagad, Rocket, and Upay. These partners operate under their own privacy policies and are bound by confidentiality obligations. cruckex does not pass your full account details to payment providers beyond what is required to complete the transaction.

3.2 Identity Verification and KYC Providers

Where identity verification is required as part of the KYC process, your identity documents or identity data may be shared with a contracted third-party verification provider. Such providers are bound by strict data processing agreements and may only use the data for the specific verification purpose for which it was shared.

3.3 Game Studio Partners

Casino and slot games on cruckex are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play these games, technical session data (such as a session token and stake amounts) may be transmitted to the relevant game provider's servers to facilitate gameplay. Game providers do not receive your full personal profile or financial details.

3.4 Legal and Regulatory Disclosure

cruckex may disclose personal data where required to do so by a valid legal obligation, court order, or regulatory demand. In such cases, cruckex will disclose only the minimum information required to satisfy the legal requirement and, where legally permitted, will notify the affected player of the disclosure request.

3.5 Business Transfers

In the event that cruckex undergoes a corporate restructuring, merger, or acquisition, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, cruckex will ensure that the receiving entity is bound by data protection obligations at least equivalent to those set out in this policy, and registered players will be notified of any material change to data controllership.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by the cruckex Platform when you visit. They enable the Platform to remember your session, maintain your login state, and store certain preferences to improve your experience on return visits. Cookies do not contain your password or sensitive financial information.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies will impair the functionality of the cruckex Platform and may prevent you from logging into your account or completing transactions. Disabling analytics or preference cookies will not affect your ability to use the Platform's core features.

4.4 No Third-Party Advertising Cookies

cruckex does not permit third-party advertising networks to place tracking cookies on our Platform. We do not engage in retargeted advertising campaigns that track your browsing behaviour across external websites. Any analytics tools we use are configured in a privacy-preserving mode with IP anonymisation enabled.

5. Data Security

cruckex implements a layered security architecture to protect your personal data against unauthorised access, loss, or misuse. Our security measures include:

Despite these measures, no internet-based platform can guarantee absolute security. cruckex strongly encourages all players to use a strong, unique password for their account, enable any available two-factor authentication, and contact support@cruckex immediately if they suspect their account has been accessed without authorisation.

6. Data Retention

cruckex retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregated data (containing no personally identifiable information) may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a player on the cruckex Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact support@cruckex with your full name, registered email address, and a clear description of your request. cruckex will respond within a reasonable timeframe.

7.1 Right of Access

You have the right to request a copy of the personal data that cruckex holds about you. Upon receipt of a valid access request, we will provide you with a summary of the data held, the purposes for which it is being processed, and the categories of third parties with whom it has been shared.

7.2 Right to Rectification

If any personal data held by cruckex is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered mobile number or email address, you may be able to update these directly within your account settings. For identity data, a correction request will require re-submission of valid supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal data in circumstances where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis for processing exists, or where you believe the data has been processed unlawfully. Please note that erasure requests cannot override data retention obligations arising from legal, compliance, or fraud prevention requirements. In such cases, cruckex will explain why full erasure cannot be completed and confirm what data will be removed.

7.4 Right to Restrict Processing

You may request that cruckex restrict the processing of your personal data where you contest its accuracy, where processing is unlawful but you prefer restriction over erasure, or where cruckex no longer needs the data but you require it for the establishment of a legal claim. During a restriction period, cruckex will continue to store your data but will not process it for any other purpose without your consent.

7.5 Right to Withdraw Marketing Consent

Where cruckex processes your data for marketing communications on the basis of your consent, you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of marketing communications sent prior to withdrawal. After withdrawal, your contact details will be suppressed from marketing lists while being retained on our core player record for the standard retention period.

7.6 Complaints

If you believe that cruckex has handled your personal data in a manner that does not comply with this Privacy Policy, please contact us at support@cruckex in the first instance. We take all privacy complaints seriously and will investigate and respond to your concern promptly. If you remain dissatisfied following our response, you may seek further recourse through the appropriate legal channels in Bangladesh.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

cruckex reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. Where a material change is made, the revised policy will be published on this page with an updated effective date. Registered players will be notified of material changes via email to their registered address. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised policy.

8.2 Policy Version History

This is version 1.0 of the cruckex Privacy Policy, effective 1 January 2026. All previous versions are superseded by this document. If you registered on the Platform prior to this date, the current version applies from the effective date.

8.3 Contact for Privacy Matters

All privacy-related enquiries, data access requests, rectification requests, erasure requests, and complaints should be directed to our support team. We aim to acknowledge all privacy requests within 2 business days and to provide a substantive response within 14 business days of receipt. Complex requests involving large volumes of data may take longer; in such cases we will notify you of the expected timeline.