cickex Privacy Policy – How We Collect, Use & Protect Your Personal Data

cickex collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party payment and identity verification partners. The categories of personal data we collect are set out below.

1.1 Registration & Account Data

When you create a cickex account, we collect:

• Full legal name (as it appears on your National ID or Passport);
• Date of birth (used to verify you are aged 18 or over);
• Email address (used for account communications and verification);
• Mobile phone number (linked to your bKash, Nagad, Rocket, or Upay payment method);
• Residential address in Bangladesh (city, district, and postal code);
• Username and hashed password (we never store your plain-text password);
• Account currency preference (Bangladeshi Taka, ৳).

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to confirm your age, cickex may request the following documents before processing withdrawal requests or where your account activity triggers a review:

• A copy of your National Identity Card (NID) or valid Passport;
• A selfie photograph holding your identity document (liveness check);
• Proof of Payment Method ownership — for example, a screenshot of your registered bKash or Nagad account showing your mobile number and full name;
• Proof of address (utility bill, bank statement, or similar document issued within the last 90 days) for withdrawals exceeding ৳50,000.

1.3 Transaction & Financial Data

We record details of all deposits and withdrawals processed through your account, including:

• Transaction amount in Bangladeshi Taka (৳);
• Transaction timestamp (Bangladesh Standard Time, UTC+6);
• Payment method used (bKash, Nagad, Rocket, or Upay);
• Mobile wallet transaction reference number;
• Account balance before and after each transaction.

cickex does not collect or store full credit card numbers, bank account numbers, or any payment credentials beyond the mobile wallet identifiers listed above.

1.4 Betting & Gaming Activity Data

We maintain a complete record of your activity on the platform, including:

• All bets placed — sport, market, selection, stake (৳), odds, and outcome;
• Casino and crash game sessions — game title, provider, bet amounts, and results;
• Bonus claims, wagering progress, and promotion participation history;
• Session duration, login timestamps, and logout timestamps.

1.5 Technical & Device Data

When you access the cickex platform, our servers automatically record:

• IP address (used for geolocation, fraud detection, and security logging);
• Device type, operating system, and browser version;
• Referring URL and on-site navigation path;
• Screen resolution and language settings;
• Cookie identifiers and session tokens (see Section 5 for full cookie details).

1.6 Communications Data

If you contact cickex support by email, live chat, or any other channel, we retain a record of the communication — including your message content and our response — for a period of up to 3 years, for quality assurance, dispute resolution, and regulatory compliance purposes.

cickex uses your personal data for the specific, limited purposes described in this section. We do not use your data for any purpose that is incompatible with the original reason it was collected, and we do not use it for automated profiling decisions that produce significant legal effects on you without human review.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contract performance
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method identifiers	Contract performance
Detecting and preventing fraud, AML compliance	Transaction data, IP address, device data	Legal obligation / Legitimate interest
Providing customer support	Communications data, account data	Contract performance
Sending service notifications (e.g., deposit confirmations)	Email address, mobile number	Contract performance
Sending promotional offers (with your consent)	Email address, betting activity	Consent
Responsible gaming monitoring and interventions	Gaming activity, transaction data, session data	Legal obligation / Legitimate interest
Platform security and abuse prevention	IP address, device data, session logs	Legitimate interest
Improving platform features and user experience	Aggregated, anonymised usage data	Legitimate interest

2.1 Marketing Communications

cickex will only send you promotional emails or SMS messages about bonuses, seasonal offers (for example, BPL finals promotions or Eid special bonuses), or new game launches if you have explicitly opted in to marketing communications at registration or in your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

2.2 Responsible Gaming Monitoring

As part of our commitment to safe gambling, cickex analyses patterns in your betting activity and session data to identify indicators of problem gambling behaviour. Where such indicators are detected, we may send you a responsible gaming notification, apply a precautionary deposit limit, or recommend that you visit our Responsible Gaming page. This monitoring is carried out in your interest and does not constitute a judgment about your character.

Every instance of personal data processing at cickex rests on one of the following legal bases. Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and providing access to betting and gaming services.
• Legal Obligation: cickex is required by applicable law to collect and retain certain personal data, including KYC documentation for anti-money laundering compliance, age verification records, and transaction logs.
• Legitimate Interest: cickex processes certain data where we have a legitimate business interest that is not overridden by your rights — for example, fraud detection, platform security, responsible gaming monitoring, and aggregated analytics to improve the platform experience.
• Consent: Where processing is not covered by the above bases — for example, sending promotional emails or placing non-essential cookies — cickex will request your explicit, freely given, informed consent and will record it with a timestamp. You may withdraw consent at any time.

cickex does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only where adequate data protection standards are in place.

4.1 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, cickex shares your mobile number and transaction reference with the relevant mobile financial service provider. These providers operate under their own privacy policies and are independent data controllers with respect to your mobile wallet data.

4.2 Identity Verification Providers

For KYC verification, cickex may share your identity documents and registration data with a third-party identity verification service. Such providers are engaged under a data processing agreement that restricts them from using your data for any purpose other than identity verification on behalf of cickex.

4.3 Game Content Providers

Third-party game suppliers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — receive only the data necessary to deliver their game content to your device and to record game outcomes. This typically comprises a session token and your account currency. These providers do not receive your full name, NID number, or payment method details.

4.4 Legal & Regulatory Disclosure

cickex may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, court order, or binding regulatory instruction. We will notify you of any such disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the successor entity as part of the transaction. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.

cickex uses cookies and similar technologies (including local storage and session storage) to operate the platform, keep you logged in, remember your preferences, and analyse usage patterns. The categories of cookies we use are described below.

Cookie Category	Purpose	Consent Required?
Strictly Necessary	Session management, login authentication, CSRF protection, load balancing. Without these cookies, the platform cannot function.	No — essential for operation
Functional	Remembering your language preference, display settings, and responsible gaming limit selections.	No — enhances usability
Analytical	Aggregated, anonymised data on how players navigate the platform — page views, session length, error rates. Used to improve the platform experience.	Yes — opt-in required
Security	Fraud detection signals, bot detection, suspicious login alerts. Data is processed in real time and is not shared with third-party advertisers.	No — essential for security

5.1 Cookie Lifetime

Session cookies expire when you close your browser. Persistent cookies (used for functional and analytical purposes) have a maximum lifetime of 12 months from the date they are set, after which they are automatically deleted and, where relevant, re-requested with fresh consent.

5.2 Managing Cookies

You may disable or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your cickex account and will impair core platform functionality. Disabling analytical cookies will not affect your ability to place bets or process payments.

cickex retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to maintain your account, or to comply with legal and regulatory obligations. Our standard retention periods are set out below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML compliance, dispute resolution
KYC identity documents	5 years from account closure or last transaction	Regulatory / legal obligation
Transaction and financial records	7 years from the date of transaction	Financial record-keeping obligations
Betting and gaming history	5 years from last activity	Dispute resolution, responsible gaming monitoring
Customer support communications	3 years from the date of communication	Quality assurance, dispute resolution
Session and device logs	12 months from the session date	Security and fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Consent audit trail
Anonymised analytical data	Indefinitely (no personal identifiers)	Platform improvement

6.1 Account Closure and Data Deletion

When you close your cickex account, your personal data is not immediately deleted. It is retained for the periods specified in the table above to satisfy our legal obligations. After those periods have elapsed, your personal data is securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with you as an individual.

If you request deletion of your data before the mandatory retention period has expired, we will delete all data that is not subject to a legal retention obligation and will inform you of which records must be retained and for how long.

As a user of the cickex platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". cickex will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all personal data cickex holds about you, including a summary of how it is used, with whom it is shared, and how long it will be retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, you may also update certain information directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legal basis for continued processing. We will honour erasure requests subject to any mandatory legal retention obligations described in Section 6.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your personal data — for example, while a rectification request is being assessed — without deleting the data.
• Right to Data Portability: You may request that cickex provides your account and transaction data in a structured, commonly used, machine-readable format (CSV or JSON) so that you can transfer it to another service.
• Right to Object: Where processing is based on legitimate interest, you have the right to object. cickex will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support or updating your account settings. Withdrawal does not affect prior lawful processing.

cickex takes the security of your personal data seriously. We implement a layered set of technical and organisational controls designed to protect your data against unauthorised access, disclosure, alteration, and destruction.

8.1 Technical Controls

• TLS 1.3 / 256-bit SSL encryption on all data transmitted between your device and cickex servers;
• AES-256 encryption at rest for all stored personal data, KYC documents, and financial records;
• Password hashing using industry-standard bcrypt — plain-text passwords are never stored;
• Two-factor authentication (2FA) available for all player accounts and mandatory for staff access to production systems;
• IP-based rate limiting and CAPTCHA on login endpoints to prevent brute-force attacks;
• Automated anomaly detection to flag unusual login locations, rapid balance changes, or multiple failed authentication attempts;
• Regular penetration testing by independent security professionals on a quarterly basis.

8.2 Organisational Controls

• Access to personal data is restricted on a strict need-to-know basis through role-based access controls (RBAC);
• All cickex staff with access to personal data complete mandatory data protection and security training on joining and annually thereafter;
• KYC documents are accessible only to the compliance team and are subject to a dedicated access log;
• Third-party suppliers are assessed for data security standards before engagement and are bound by data processing agreements.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, cickex will notify affected players by email without undue delay and, in any event, within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps cickex is taking to contain and remediate it.

cickex reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When we make material changes — for example, introducing a new category of data collection, a new third-party sharing arrangement, or a change to retention periods — we will notify registered players by email at least 7 days before the changes take effect.

Minor updates that do not materially affect how we handle your data (such as typographical corrections or clarifications) may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the cickex platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to this Policy, you have the right to close your account and request deletion of your personal data in accordance with Section 7 before the change takes effect.

Previous versions of the Privacy Policy are available on request by contacting [email protected]. We maintain a version archive for a minimum of 3 years.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how cickex handles your personal information, please contact us using the details below. All privacy and data protection enquiries are handled in English by our compliance team, with a target response time of under 48 hours.

Email: [email protected]

Please include "Privacy Enquiry" or "Data Rights Request" in your subject line so that your message is routed to the correct team without delay. For data rights requests, we will ask you to verify your identity before processing the request, to ensure that personal data is only disclosed to or deleted at the request of the account holder.