cric888 Privacy Policy
— Your Data, Your Rights, Our Commitment

1. Introduction and Scope

This Privacy Policy sets out the practices of cric888 with respect to the collection, use, storage, and disclosure of personal data relating to individuals who access or use the cric888 online betting and casino platform, available at cric888.app. It applies to all registered players, visitors browsing the platform without an account, and any individual who contacts cric888 for support or information.

cric888 is operated as an entertainment and information platform serving players across all eight administrative divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. All platform operations, support communications, and data processing activities are conducted in English, and all times referenced in this Privacy Policy are in Bangladesh Standard Time (BST, UTC+6).

This Privacy Policy should be read alongside the cric888 Terms & Conditions and the Responsible Gaming policy, which together form the complete set of agreements governing your relationship with cric888. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2. Data We Collect

cric888 collects personal data only to the extent necessary for the purposes described in this Privacy Policy. We collect data in three principal ways: directly from you when you register or interact with the platform, automatically as you navigate the platform, and from third-party service providers involved in payment processing or identity verification.

cric888 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of identification, unless specifically required by law or regulation. Where sensitive data is incidentally disclosed during a support interaction or complaint, it will be handled with heightened care and not retained beyond the resolution of the matter.

3. How We Use Your Data

cric888 uses personal data collected from players for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table outlines the primary purposes for which cric888 processes personal data and the lawful basis for each.

cric888 will never use your personal data to make automated decisions that have a significant legal or similarly significant effect on you without providing an opportunity for human review. Where automated systems flag an account for review (for example, as part of fraud or AML monitoring), a member of the cric888 compliance team will assess the situation before any account action is taken.

4. Data Sharing and Third Parties

cric888 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We share personal data only in the circumstances described below, and only with parties who are contractually required to handle that data securely and in accordance with this Privacy Policy.

• Payment Processing Partners: Financial transaction data is shared with payment gateway providers supporting bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank solely for the purpose of processing deposits and withdrawals. These providers operate under their own privacy frameworks and are certified payment service operators.
• Game Content Providers: When you play casino games or sports betting markets powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as session tokens and bet records) is shared with those providers to facilitate game delivery and settlement. No personally identifiable information beyond what is required for this purpose is shared.
• Identity Verification Services: Where KYC verification is conducted through a third-party verification partner, identity documents and identity data are shared with that partner under a strict data processing agreement. Verification partners are not permitted to retain or use your data beyond the scope of the verification process.
• Legal and Regulatory Authorities: cric888 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal order, or where cric888 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Platform Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on cric888's behalf are bound by data processing agreements that restrict use of your data to the provision of those technical services only.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the cric888 business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that materially affects how your data is handled.

5. Cookies and Tracking Technologies

cric888 uses cookies and similar technologies (including local storage and session storage) to operate the platform effectively, remember your session state, and gather aggregated analytics about how players interact with the site. The following table describes the categories of cookies used on the cric888 platform.

cric888 does not use third-party advertising cookies or tracking pixels for the purpose of building behavioural profiles for advertising networks. You may manage cookie settings through your browser. Note that disabling essential cookies may impair your ability to log in and use core platform features. For details on managing cookies in your browser, refer to your browser's help documentation.

6. Data Security Measures

cric888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to address evolving security threats.

• 256-Bit SSL Encryption: All data transmitted between your browser or device and the cric888 platform is encrypted using TLS/SSL protocols, preventing interception of data in transit.
• Password Hashing: Account passwords are never stored in plain text. cric888 uses a strong one-way cryptographic hashing algorithm (with salting) to store password credentials, meaning that even cric888 employees cannot read your password.
• Access Controls: Access to personal data held by cric888 is restricted on a strict need-to-know basis. Platform staff are granted the minimum level of data access required to perform their role. All staff access is logged and subject to regular audit.
• Intrusion Detection and Monitoring: cric888 operates continuous server-side monitoring to detect unusual access patterns, brute-force attempts, and other potential security incidents. Alerts are responded to by the security team on a 24/7 basis.
• Secure Payment Infrastructure: Payment data is processed through certified, PCI-compliant payment gateways. Full card numbers and mobile banking credentials are never stored on cric888 servers.
• Regular Security Reviews: cric888's platform infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.

While cric888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in protecting your account by keeping your login credentials confidential, using a strong and unique password, and logging out of your account when using shared or public devices. If you suspect that your cric888 account has been accessed without your authorisation, contact our support team immediately via live chat.

7. Data Retention Policy

cric888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

When data is no longer required under any applicable retention period, cric888 will securely delete or anonymise it so that it can no longer be associated with any individual. Deletion is carried out using industry-standard data destruction methods. Players may request confirmation of the deletion of their data by contacting the cric888 privacy team at the address provided in Section 11 of this Privacy Policy.

8. Your Privacy Rights

As a registered player on the cric888 platform, you hold a number of rights in relation to your personal data. cric888 is committed to honouring these rights in a timely and transparent manner. All rights requests will be acknowledged within 3 business days and fully responded to within 30 calendar days of receipt.

To exercise any of the rights above, please contact the cric888 privacy team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request". cric888 may ask you to verify your identity before processing the request. There is no charge for submitting a rights request, though cric888 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

9. Children and Minors

The cric888 platform is strictly for adults aged 18 and above. cric888 does not knowingly collect personal data from any individual under the age of 18. All registration attempts are subject to age verification checks, and cric888 reserves the right to request documentary proof of age (such as a National Identity Card or passport) at any point in the account lifecycle.

If cric888 discovers or has reasonable grounds to believe that an account holder is under the age of 18, the account will be immediately suspended, all pending transactions cancelled, and any balance held subject to review. Any winnings generated while the account was held by a minor will be void and non-payable. The matter may be referred to relevant authorities where required.

10. Changes to This Policy

cric888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When we make material changes to this Privacy Policy, we will notify registered players via a prominent notice displayed on the platform and, where appropriate, by email to the address registered on your account.

The "Last Updated" date displayed at the top of this Privacy Policy will be revised each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how cric888 protects your personal data. Your continued use of the cric888 platform following notification of any changes constitutes your acceptance of the updated Privacy Policy.

Where changes are minor — such as corrections to formatting, spelling, or clarifications that do not alter the substance of how your data is processed — cric888 may update the policy without issuing a specific notification. Substantive changes that affect your rights or the way your data is processed will always be communicated directly before taking effect.

11. Contact and Privacy Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cric888 handles your personal data, please contact our support team using any of the channels below. All privacy-related enquiries are handled in English and are responded to within the timeframes stated in Section 8 of this policy.

cric888 is committed to resolving all privacy-related concerns through direct communication. If you are dissatisfied with the response you receive from the cric888 privacy team, you may escalate your complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". All formal complaints will receive a full written response within 14 business days. All timelines are measured in Bangladesh Standard Time (BST, UTC+6).