crx app Privacy Policy

Data We Collect

crx app collects personal data from players through several channels, including the account registration process, account verification (KYC), ongoing platform usage, payment transactions, and direct communications with our support team. The categories of personal data we collect are described below. We collect only the minimum data necessary to deliver our services safely, fairly, and in compliance with applicable legal obligations.

Data You Provide Voluntarily: When you register a crx app account, you provide identity and contact data directly. When you submit KYC documents, you provide verification data. When you contact our support team, you provide communications data. In each case, the provision of this data is a contractual requirement — without it, crx app cannot open or maintain your account or process your transactions.

Data Collected Automatically: When you access the crx app platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This data is collected to maintain platform security, detect fraudulent activity, and understand how players interact with crx app services so that we can improve them over time.

Data from Third Parties: crx app may receive limited personal data about you from third-party sources in specific circumstances, such as identity verification results from our KYC processing partners, fraud risk scores from payment security providers, or information from public fraud and sanctions screening databases as part of our anti-money-laundering compliance obligations.

How We Use Your Data

crx app processes your personal data for specific, clearly defined purposes. We do not process personal data for any purpose that is incompatible with the purposes listed below. For each processing activity, we rely on a lawful basis under applicable data protection principles — either the performance of our contract with you, compliance with a legal obligation, our legitimate interests in operating a safe and fair platform, or your freely given consent.

• Account Management: To create, maintain, and administer your crx app account, including processing your registration, verifying your identity through the KYC process, and managing your account settings and preferences.
• Payment Processing: To facilitate deposits made via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank, and to process withdrawal requests to your registered payment account. Financial data is processed strictly in accordance with payment security standards.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other forms of illegal or prohibited conduct on the crx app platform. This includes automated monitoring of betting patterns, transaction behaviour, and login activity.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling and to deliver responsible gaming interventions such as spending limit reminders, cooling-off period notifications, and self-exclusion enforcement. crx app takes its duty of care to players seriously and processes usage data proactively to fulfil this obligation.
• Legal & Regulatory Compliance: To fulfil crx app's obligations under applicable anti-money-laundering (AML) regulations, including record-keeping, suspicious activity reporting, and sanctions screening. Certain data processing in this category is mandatory and cannot be opted out of.
• Customer Support: To respond to your enquiries, resolve disputes, and deliver effective after-care. Communications data from live chat and email interactions is retained to ensure continuity of service and to support dispute resolution.
• Marketing Communications (with consent): To send you promotional emails, SMS notifications, and on-platform messages about crx app bonuses, new games, and seasonal offers — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Product Development & Analytics: To analyse aggregated, anonymised usage data to understand which crx app features and game categories are most popular, identify usability improvements, and guide platform development decisions. This analysis does not involve individually identifiable data.

crx app does not use automated decision-making processes that produce legal or similarly significant effects on individual players, except in the context of fraud detection, where automated flags are always reviewed by a human compliance officer before any account action is taken.

Cookies & Tracking

crx app uses cookies and similar tracking technologies to operate the platform, remember your session, analyse usage patterns, and deliver a personalised experience. Cookies are small text files stored on your device by your browser. They do not contain executable code and cannot carry viruses or malware.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the crx app platform to function. They maintain your login session, remember your account preferences, enable secure page navigation, and ensure that security features operate correctly. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players interact with the crx app platform — for example, which game categories are most visited, how long sessions last, and which pages experience the highest exit rates. This data is used to improve platform performance and user experience. No personally identifiable information is collected by these cookies.
• Functional Cookies: These cookies remember your preferences and settings — such as your last-visited game lobby, language preferences, and notification settings — so that crx app can deliver a more personalised experience on your next visit.
• Security Cookies: These cookies help crx app detect and prevent fraudulent login attempts, session hijacking, and other security threats by tracking authentication state and device fingerprint signals across your session.

Managing Cookies: You may control cookie settings through your browser's privacy settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from accessing your crx app account and using platform services. Disabling performance or functional cookies will not prevent you from using the platform but may result in a less personalised experience.

Data Sharing & Third Parties

crx app does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only with carefully selected service providers and in specific circumstances required by law. All third-party service providers engaged by crx app are contractually bound to process player data only on crx app's instructions and in accordance with applicable data protection standards.

Categories of Third Parties With Whom We Share Data:

• Payment Processors: We share the minimum necessary financial data with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank — to process your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and are independently regulated financial institutions.
• KYC & Identity Verification Partners: We share identity documents and personal details with regulated identity verification service providers to carry out the KYC process required for account opening and withdrawal eligibility. These partners are bound by strict data handling agreements and are prohibited from using your data for any other purpose.
• Game Content Providers: When you play a game on the crx app platform — such as those provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited technical data (such as your anonymised player ID and session token) is passed to the game provider to initialise and manage your gaming session. These providers do not receive your full name, payment details, or other sensitive personal data.
• Fraud Prevention & AML Services: We share transaction and identity data with fraud screening and anti-money-laundering compliance services to meet our legal obligations. This may include screening against international sanctions lists and politically exposed persons (PEP) databases.
• IT Infrastructure & Hosting Providers: Our platform infrastructure is operated on secure cloud servers. Hosting partners process data strictly as data processors under our instruction and are contractually prohibited from accessing or using player data for their own purposes.
• Legal & Regulatory Authorities: crx app may be required by law to disclose personal data to government agencies, law enforcement bodies, or regulatory authorities in response to a lawful request, court order, or as part of our statutory reporting obligations. We will notify affected players of such disclosure where we are legally permitted to do so.

crx app does not transfer personal data to countries outside Bangladesh except where strictly necessary for the delivery of the services described above. Where international data transfers occur — for example, in connection with a game provider or KYC service operating internationally — we ensure that appropriate contractual safeguards are in place to protect your data to a standard equivalent to local data protection requirements.

Data Security Measures

crx app implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no digital platform can guarantee absolute security, crx app maintains a security posture consistent with industry best practices for online gaming and financial services platforms operating in Bangladesh.

Technical Security Controls:

• Encryption in Transit: All data transmitted between your device and crx app servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This applies to all platform pages, login sessions, payment flows, and API communications.
• Encryption at Rest: Personal data stored in crx app databases is encrypted at rest using AES-256 encryption. Payment credentials and KYC documents are stored in isolated, separately encrypted repositories with restricted access controls.
• Access Controls: Access to player data within the crx app organisation is granted on a strict need-to-know basis. Role-based access controls ensure that support agents, compliance officers, and technical staff can only access the data categories relevant to their specific function. All access events are logged and reviewed.
• Penetration Testing & Vulnerability Management: crx app conducts regular security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited. Critical security patches are applied on a priority basis.
• Fraud Monitoring Systems: Automated real-time monitoring systems analyse login behaviour, transaction patterns, and session activity to detect suspicious events. Anomalous activity triggers alerts for human review and, where necessary, temporary account suspension pending investigation.

Organisational Security Measures: crx app staff with access to personal data receive regular data protection training and are bound by confidentiality obligations. All data processing activities are documented in our internal data processing register. In the event of a personal data breach that poses a risk to players, crx app will take immediate containment action and notify affected players without undue delay.

Your Role in Security: You also play an important role in keeping your crx app account secure. We strongly encourage you to use a strong, unique password for your crx app account, to never share your login credentials with any third party, and to log out of your account when using shared or public devices. If you suspect any unauthorised access to your account, contact the crx app support team immediately.

Your Privacy Rights

As a crx app player, you hold a number of rights in relation to the personal data we hold about you. crx app is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the crx app support team at [email protected] (plain text — not a clickable link) with your account details and a description of your request. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that crx app holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic contact details directly through your crx app account settings, or contact support for changes to verified identity data.
• Right to Erasure: In certain circumstances, you have the right to request that crx app delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw your consent and no other legal basis for processing exists, or where the data has been unlawfully processed. Please note that this right is subject to our legal obligations — we are required to retain certain records for compliance and AML purposes even after account closure, and in those cases we cannot fulfil an erasure request in full.
• Right to Restrict Processing: You may request that crx app restricts the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and verification of our legitimate interests is pending.
• Right to Data Portability: Where crx app processes your personal data on the basis of your consent or for the performance of our contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where crx app relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where crx app processes your data on the basis of your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

crx app will never discriminate against players who exercise their privacy rights. Exercising any of the above rights will not affect your ability to use the crx app platform, subject only to any account closure you initiate as part of a deletion request.

Data Retention

crx app retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an active crx app account, and to comply with our legal, regulatory, and contractual obligations. The retention periods for different categories of personal data are set out below.

On expiry of the applicable retention period, crx app will securely delete or anonymise the relevant personal data so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

In cases where crx app is subject to a legal hold — for example, as a result of ongoing litigation, a regulatory investigation, or a law enforcement request — personal data relevant to that hold will be retained beyond the standard retention period until the hold is lifted and the matter is fully resolved.

Policy Updates & Contact

crx app reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our data processing activities, or the services we offer. All updates will be published on this page with a revised "Last Updated" date. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players by email at the address held on their crx app account with a minimum of 14 days' notice before the changes take effect.

We encourage all crx app players to review this Privacy Policy periodically to stay informed about how their personal data is handled. Continued use of the crx app platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms, unless you notify us otherwise before the effective date of the changes.

How to Contact Us About Privacy: For any question, concern, or request relating to this Privacy Policy or the personal data crx app holds about you, please contact our support team. All privacy-related enquiries will be directed to the crx app data protection team and handled with appropriate confidentiality:

• Email (plain text — not a link): [email protected]
• Website: crx-app.com
• Response Time: We aim to acknowledge all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy was last reviewed and updated in January 2026. The current version supersedes all previous versions of the crx app Privacy Policy. For related policies, please also review our Terms & Conditions and Responsible Gaming pages.