Crex Privacy Policy — How We Keep Your Data Safe

Crex believes that every member's personal information is part of a relationship built on trust. When you register with Crex, you share important details with us — and it is our responsibility to handle that information with care.

This Privacy Policy clearly outlines what data we collect, why we collect it, how it is stored, and what your rights are. Written with Bangladeshi users in mind, the entire policy is presented in plain language — no legal jargon, easy to read and understand.

If this policy changes, registered members will be notified by email or SMS, and the updated date will be shown at the top of the page. Continued use of the platform after any changes will be considered acceptance of the updated policy.

Crex collects data in two ways — information you provide directly, and data gathered automatically as you use the platform.

Information you provide directly:

• Full name, mobile number, email address, and date of birth (collected at registration).
• National ID or passport details (collected during KYC verification).
• Payment method details — bKash, Nagad, or Rocket number (used during deposits and withdrawals).
• Your conversation history with the support team.
• Any preferences or settings you have configured yourself.

Automatically collected information:

• IP address and approximate location (for security verification purposes).
• Browser type, operating system, and device model.
• A log of which pages you visited on the platform and how long you spent on each.
• Cookie and session data (see Section 8 for details).
• Betting and gaming history — records of deposits, bets, and withdrawals.

Crex uses your data only for purposes that improve your experience and keep the platform secure. Each purpose is clearly listed below.

Crex never shares your data with third parties for advertising purposes. Personalized offers are sent to you exclusively within the Crex platform.

Crex never sells your data to third parties. In limited cases, certain information must be shared with specific partners in order to deliver our services — all of these instances are clearly outlined below.

• Payment Provider: Only the information necessary to process transactions is shared with bKash, Nagad, Rocket, and partner banks. These partners are also bound by their own privacy policies.
• Game Provider: When playing games from providers such as Pragmatic Play, Evolution, and JILI, technical session data may be transmitted to their servers. However, your personal identity and payment details are never shared with them.
• KYC Verification Service: A licensed KYC provider is used for identity verification. This process is solely for confirming your identity — data retention is limited to a defined period.
• Legal Authorities: If Crex is required to disclose information due to a court order or legal obligation, it will do so — but only the minimum information necessary will be provided.
• Audit Body: Authorized auditors for fair play and RNG certification may review gaming system data — not personal information.

Crex's security framework is built to the same standards used in international banking and e-commerce, with dedicated protection measures at every layer.

• SSL Encryption: All data transmitted between your browser and Crex's servers is protected with 256-bit TLS encryption — no one outside of your browser and Crex's servers can read it.
• Password hashing: Your password is never stored directly — only a strong cryptographic hash is kept.
• Firewall & DDoS Protection: Our servers are protected at all times by advanced firewalls and DDoS mitigation systems.
• Two-Factor Authentication (2FA): You can enable an additional OTP verification step each time you log in to your account.
• Suspicious Activity Detection: Any unusual login or transaction patterns are automatically flagged for account review.
• Separate Data Storage: Members' personal and financial information is stored on separate, secured servers.
• Regular Security Audits: External security experts conduct regular audits of Crex's systems.

That said, your participation is essential to full security — use a strong password, never share it with anyone, and avoid logging in over public Wi-Fi.

Crex does not retain any data longer than necessary. Separate retention periods are defined for different categories of information.

• Account information: Retained for the duration of your active account and for up to 5 years after closure (as required by law).
• Transaction records: Financial transaction records are retained for up to 7 years.
• Support Conversations: Deleted 2 years after the last interaction.
• Log data: Server logs are typically deleted after 90 days.
• KYC Documents: Retained for up to 5 years after account closure.

Once the retention period expires, data is securely deleted or permanently anonymized.

As a Crex member, you have important rights over your own data. Contact the Help Center to exercise any of these rights.

Crex uses cookies on the platform — this is a standard part of how websites operate. A cookie is a small text file stored in your browser that helps the platform recognize you.

You can disable cookies through your browser settings, though doing so may affect the functionality of certain platform features. Disabling essential cookies will prevent login sessions from being maintained.

Crex's services are strictly for users aged 18 and above. We do not knowingly collect any information from anyone under the age of 18.

• Date of birth is verified at registration. If the user is under 18, the registration cannot be completed.
• If any member is found to be under 18 during a subsequent verification, their account will be closed immediately.
• If a parent or guardian believes their child has created an account, please contact support@crex.world — action will be taken within 24 hours.

For any questions, complaints, or requests to exercise your rights regarding this Privacy Policy, please contact Crex's support team directly.

• Email: support@crex.world — please mention Privacy in the subject line.
• Live Chat: Help Center You're welcome to communicate in Bengali.
• An initial response will be provided within 48 hours of receiving a complaint.
• For complex matters, a full resolution or detailed explanation will be provided within 30 days.