Privacy Policy — How cirikax Handles Your Data

This Privacy Policy ("Policy") describes how cirikax ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or generated by users ("you", "the Player") of the cirikax website located at https://cirikax.net. This Policy applies to all cirikax players, including those registering new accounts, making deposits, placing bets, and accessing any feature of the platform from Bangladesh or elsewhere.

By creating a cirikax account or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. We encourage you to read this document in full and to contact us if you have any questions about how your data is handled.

1. Data We Collect

cirikax collects personal data from players through several channels: directly from you during registration and account management, automatically during your use of the platform, and occasionally from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are as follows.

1.1 Registration and Identity Data

When you create a cirikax account, we collect the following information:

• Full legal name as it appears on your national identity card (NID) or passport.
• Date of birth (used for mandatory age verification — you must be 18 or older).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Email address and mobile phone number.
• Username and (hashed, never plain-text) password.

1.2 Financial and Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (BDT), cirikax collects transaction-related information including:

• Payment method identifiers (e.g., your bKash mobile number, Nagad wallet ID, Rocket account reference, or bank account details). We do not store full bank account or card numbers directly on our servers.
• Transaction amounts, dates, times, and reference numbers.
• Deposit and withdrawal history associated with your account.
• Bonus redemption and wagering activity records.

1.3 Identity Verification (KYC) Data

cirikax operates a Know Your Customer (KYC) programme. When we request identity verification, we may collect and process copies of the following documents:

• National Identity Card (NID) — front and back.
• Passport biodata page.
• Proof of address (utility bill, bank statement, or equivalent dated within 90 days).
• Selfie or live photograph for facial comparison against identity documents.

KYC documents are processed in accordance with our anti-money laundering (AML) obligations and are stored securely with restricted access.

1.4 Technical and Usage Data

When you use the cirikax platform, our servers automatically log the following technical data:

• IP address and approximate geographic location.
• Browser type, version, and operating system.
• Device type (desktop, mobile, tablet) and screen resolution.
• Pages visited, session duration, and navigation paths through the site.
• Game activity logs, including games played, bet amounts, outcomes, and session timestamps.
• Login timestamps and logout events.

1.5 Communications Data

If you contact cirikax via live chat, email, or any other support channel, we retain records of those communications — including your messages, our responses, attachments, and any personal data contained within the exchange. This is necessary for quality assurance, dispute resolution, and regulatory compliance.

2. How We Use Your Data

cirikax uses the personal data it collects only for the purposes described in this Policy. We process your data on the basis of one or more of the following legal grounds: the performance of a contract (your account agreement), compliance with a legal obligation, our legitimate business interests, or your explicit consent where required.

Purpose	Data Used	Legal Basis
Account registration and management	Identity data, contact data	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Age and identity verification (KYC)	KYC documents, identity data	Legal obligation
Anti-money laundering (AML) monitoring	Transaction data, usage data	Legal obligation
Fraud prevention and security	Technical data, transaction data	Legitimate interests
Customer support and dispute resolution	Communications data, account data	Contract performance
Responsible gaming monitoring	Usage data, game activity logs	Legal obligation / legitimate interests
Sending account and transaction notifications	Contact data, transaction data	Contract performance
Sending promotional communications (opted-in players only)	Contact data, game preferences	Consent
Platform analytics and performance improvement	Technical data, usage data (anonymised)	Legitimate interests

2.1 Marketing Communications

cirikax may send you promotional emails or in-platform notifications about bonuses, new games, seasonal promotions (such as Eid special offers or Pohela Boishakh celebrations), and other cirikax services — but only if you have opted in to receive such communications during registration or through your account preferences. You may withdraw your consent to marketing communications at any time by contacting our support team or updating your notification preferences in your account settings.

Withdrawal of consent to marketing communications will not affect the processing of your data for any other purpose listed in this Policy, and will not impact your ability to use your cirikax account normally.

3. Data Sharing & Third Parties

cirikax does not sell your personal data to any third party. We do, however, share data with carefully selected partners where it is necessary to deliver the services you use. All third parties with whom cirikax shares personal data are bound by contractual obligations to keep that data secure and to use it only for the specified purpose.

3.1 Payment Processing Partners

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, we share the minimum necessary transaction data with those payment providers to complete the transaction. Payment partners process your data in accordance with their own privacy policies and applicable financial regulations.

3.2 Identity Verification Services

cirikax uses third-party KYC and identity verification providers to assist with the verification of player identities and age confirmation. These providers receive only the identity documents and data necessary to perform the verification and are prohibited from using that data for any other purpose.

3.3 Game Software Providers

Games on the cirikax platform are powered by third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive your account identifier and game session data to facilitate game play and to resolve technical disputes. They do not receive your full identity or financial data.

3.4 Analytics and Platform Technology

cirikax uses technology partners for platform analytics, performance monitoring, and fraud detection. These partners may process anonymised or pseudonymised technical usage data. No directly identifiable personal data (such as your name or contact details) is shared with analytics providers.

3.5 Legal and Regulatory Disclosure

cirikax may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of such disclosure where legally permitted to do so.

4. Cookies & Tracking Technologies

cirikax uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, analyse site performance, and detect fraudulent activity. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain your payment information or passwords.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Required?
Essential / Session	Maintain your login session, remember your account state, and keep the platform functional during your visit. Without these, the site cannot operate correctly.	Yes — always active
Security	Detect and prevent fraudulent logins, bot activity, and other security threats. These cookies help protect your account from unauthorised access.	Yes — always active
Preference / Functional	Remember your language preferences, display settings, and other customisations so you do not need to re-enter them on each visit.	Optional
Analytics / Performance	Collect anonymised data about how players navigate and use the cirikax platform, helping us identify areas for improvement. Data is aggregated and not linked to individual identities.	Optional

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling essential or security cookies will prevent cirikax from functioning correctly and may make it impossible to log in or complete transactions. Instructions for managing cookies in popular browsers are available through each browser's help documentation.

cirikax does not use cookies to serve third-party advertising or to track your browsing behaviour across unrelated websites. All cookies set by cirikax are first-party and serve the purposes described in the table above.

5. Data Security

cirikax takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and cirikax servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting the cirikax platform.
• Encrypted Password Storage: Passwords are never stored in plain text. cirikax uses industry-standard one-way hashing algorithms to store password credentials. Even our own staff cannot retrieve your password.
• Access Controls: Personal data is accessible only to authorised cirikax personnel whose job roles require access. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): cirikax offers optional 2FA for all player accounts. We strongly encourage all players to enable 2FA to provide an additional layer of protection against unauthorised login.
• Fraud Monitoring: cirikax operates continuous automated monitoring for unusual account activity, suspicious login patterns, and anomalous transaction behaviour. Suspicious activity triggers an internal review process.
• Data Minimisation: We do not hold more personal data than is necessary. Sensitive financial data such as full bank account numbers and mobile wallet PINs are never stored on cirikax servers.

5.1 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, cirikax will take immediate steps to contain the breach, assess its impact, and notify affected individuals as promptly as practicable. Notifications will be sent to the email address registered to each affected account and will include a clear description of the breach, the data affected, and the steps we are taking to address it.

5.2 Your Responsibilities

While cirikax implements strong security measures on the platform side, account security also depends on you. You are responsible for keeping your username, password, and any 2FA codes confidential. Do not share your cirikax login credentials with any other person. If you believe your account has been compromised, contact our support team immediately via live chat or at support@cirikax.net.

6. Data Retention

cirikax retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual requirements. The following retention guidelines apply:

Data Category	Retention Period	Reason
Account registration and identity data	Duration of active account + 5 years post-closure	AML and regulatory compliance
KYC verification documents	Duration of active account + 5 years post-closure	Legal obligation — financial record-keeping
Transaction and financial records	7 years from date of transaction	Financial regulation and tax compliance
Game activity and betting logs	3 years from date of activity	Dispute resolution and responsible gaming
Customer support communications	3 years from last interaction	Quality assurance and dispute resolution
Technical and usage logs	13 months on a rolling basis	Security monitoring and fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent

Once the applicable retention period has expired, personal data is either securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it is no longer considered personal data.

7. Your Privacy Rights

As a cirikax player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat (available 24/7 on site) or by emailing support@cirikax.net. We will respond to all valid requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

7.1 Right of Access

You have the right to request a copy of the personal data that cirikax holds about you. We will provide this in a structured, commonly used, machine-readable format. This right is free of charge for the first request in any 12-month period; subsequent requests may attract a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For data you can update directly in your account settings (such as your email address), please make the change there. For data that requires manual correction (such as a name discrepancy flagged during KYC), please contact our support team.

7.3 Right to Erasure

You may request that cirikax delete your personal data. We will action such requests where we are not legally required to retain the data for compliance purposes. Please note that where data must be retained to meet AML, KYC, or financial record-keeping obligations, we cannot action erasure requests for that specific data until the mandatory retention period has expired.

7.4 Right to Restrict Processing

You have the right to request that cirikax restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved, or while you are contesting the grounds on which we are processing your data.

7.5 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. If you exercise this right, cirikax will immediately cease sending you marketing communications. This will not affect the processing of your data for account management, transaction processing, or regulatory compliance purposes.

7.6 Right to Data Portability

Where we process your personal data on the basis of your consent or for the performance of your account contract, and where that processing is carried out by automated means, you have the right to receive your data in a portable format and to have it transmitted directly to another service provider where technically feasible.

8. Policy Updates & Contact

cirikax reviews and updates this Privacy Policy periodically to reflect changes in our data practices, technology, legal obligations, or the services we offer. The effective date at the top of this document will always reflect when the most recent update was made. Where a material change is made to this Policy, we will make reasonable efforts to notify active players via their registered email address or through a prominent notice on the cirikax platform.

We encourage you to review this Policy periodically. Your continued use of the cirikax platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any material change to this Policy, you should contact us to discuss your options or close your account.

8.1 Contacting cirikax About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how cirikax handles your personal data, please get in touch using one of the following channels:

• Live Chat: Available 24/7 directly on the cirikax platform. Our support team is ready to assist with privacy queries at any time.
• Email: support@cirikax.net — for written privacy requests including access, rectification, and erasure requests. Response within 30 days.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).