circkx Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data circkx collects, how it is used, who it may be shared with, and the rights you hold as a player on our Bangladesh-focused betting platform.
Overview
Our Commitment to Your Privacy
At circkx, we take data privacy seriously. This Privacy Policy describes how circkx ("we", "us", "our") collects, processes, stores, and shares personal information when you use our online casino and sports betting platform at circkx.com. It applies to all users registered from Bangladesh and anywhere else our platform is accessible.
By creating an account on circkx, making a deposit, placing a bet, or simply browsing our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree to these practices, please do not use the circkx platform.
This policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and circkx. Where there is any conflict between this Privacy Policy and another document, this policy governs in relation to data protection matters.
Key Commitments
- We never sell your personal data to third parties.
- All data is encrypted in transit and at rest.
- You may request deletion of your data at any time.
- We collect only what is necessary to operate the platform.
- Payment data is processed by certified payment providers.
- Your data is stored securely and never used for spam.
Section 1
Information We Collect
circkx collects personal information that is necessary to operate a safe, compliant, and enjoyable online betting and gaming platform. We gather this information through a number of channels: directly from you when you register an account or contact support; automatically when you use our platform; and occasionally from trusted third-party verification services where required to fulfil our obligations.
Information you provide directly:
- Registration data: Your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh), mobile phone number, and email address.
- Identity verification documents: National Identity Card (NID), passport, or other government-issued photo identification submitted during KYC verification.
- Account credentials: Username and hashed password. Passwords are never stored in plain text.
- Payment information: Mobile wallet number (bKash, Nagad, Rocket, Upay) or bank card details submitted at the point of transaction. Full card numbers are not stored by circkx — they are tokenised and handled by our certified payment processors.
- Communications: Any messages, queries, or complaints you submit to our support team via live chat or email, together with the date and content of those communications.
- Responsible Gaming submissions: Self-exclusion requests, deposit limit applications, and cooling-off period requests submitted through account settings or support channels.
Information collected automatically:
- Device and technical data: IP address, device type, browser type and version, operating system, screen resolution, and unique device identifiers.
- Usage and behavioural data: Pages visited on circkx, game sessions played (including game type, duration, stakes, and outcomes), bet history, deposit and withdrawal history, and click-stream data.
- Session data: Login timestamps, session duration, and logout events. This data is used for security monitoring and to detect suspicious activity.
- Cookies and similar technologies: See the Cookies & Tracking Technologies section for full details.
We do not collect sensitive categories of personal data — such as health information, racial or ethnic origin, political opinions, or religious beliefs — unless you voluntarily provide such information (for example, in the context of a responsible gaming support request). Any sensitive data provided voluntarily is handled with the highest level of care and is never shared outside the immediate support context.
Data Categories Summary
- Identity data (name, DOB, NID)
- Contact data (email, phone, address)
- Financial data (wallet numbers, transaction refs)
- Account credentials (username, hashed password)
- Verification documents (KYC submissions)
- Technical data (IP, device, browser)
- Behavioural data (game history, bets placed)
- Communication records (support chat logs)
Section 2
How We Use Your Data
circkx uses personal data collected from players for a defined set of legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary uses of your personal data are as follows:
| Purpose | Data Used | Details |
|---|---|---|
| Account Creation & Management | Identity, contact, credentials | To register your account, verify your identity, maintain your player profile, and allow you to log in securely. |
| Payment Processing | Financial data, identity | To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfers in BDT. |
| Platform Operation | Behavioural, technical | To deliver casino games, sports betting markets, live dealer sessions, and all other platform features. |
| Security & Fraud Prevention | Technical, behavioural, identity | To detect suspicious activity, prevent unauthorised access, investigate fraud, and enforce our Terms & Conditions. |
| AML Compliance | Financial, identity, behavioural | To meet anti-money laundering obligations, including transaction monitoring and KYC verification. |
| Responsible Gaming | Behavioural, communication | To monitor for signs of problem gambling, administer self-exclusions, deposit limits, and cooling-off periods. |
| Customer Support | Identity, communication | To respond to your enquiries, resolve disputes, and provide technical assistance 24/7 in English. |
| Service Improvement | Behavioural, technical | To analyse platform usage patterns, optimise game performance, improve the user interface, and develop new features. |
| Promotional Communications | Contact, behavioural | To send relevant bonus offers and platform updates where you have opted in to receive such communications. You may opt out at any time. |
Marketing Opt-Out: If you no longer wish to receive promotional emails or SMS notifications from circkx, you may unsubscribe at any time by contacting [email protected] or updating your communication preferences in account settings. Opting out of marketing does not affect transactional or security-related communications.
Section 3
Legal Basis for Processing
circkx processes personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of the processing activity:
- Contractual necessity: Processing your name, contact details, date of birth, and payment information is necessary to fulfil the contract between you and circkx — specifically, to create and maintain your account, process your transactions, and deliver the betting and gaming services you have requested. Without this data, we cannot provide the service.
- Legal obligation: We are required by applicable law to collect and retain certain data for purposes including anti-money laundering compliance, age verification, and fraud prevention. This processing is mandatory regardless of your preferences and cannot be opted out of while you maintain an active circkx account.
- Legitimate interests: We process technical and behavioural data on the basis of our legitimate interests in operating a secure, fraud-free platform, improving our services, and protecting the integrity of our betting markets. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental privacy rights.
- Consent: Where we send you marketing communications — including promotional bonus offers, seasonal campaign notifications (such as Eid promotions or Pohela Boishakh offers), and personalised game recommendations — we do so only where you have given your explicit consent at registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the legality of processing carried out prior to withdrawal.
No Processing Without Grounds: circkx does not process personal data without a valid legal basis. If you have questions about the specific legal basis applied to any particular processing activity, please contact [email protected].
Section 4
Data Sharing & Disclosure
circkx does not sell, rent, or otherwise trade your personal information to third parties for their own commercial purposes. We may share your data with carefully selected third parties only in the limited circumstances described below:
- Payment service providers: To process deposits and withdrawals, we share relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These providers act as independent data controllers in relation to the payment transaction itself and are bound by their own privacy policies and applicable financial regulations.
- Identity verification services: To fulfil our KYC and AML obligations, we may share identity data (such as name, date of birth, and NID details) with regulated identity verification providers. These providers process data solely for the purpose of verification and are bound by strict data handling agreements with circkx.
- Game content providers: Technical data such as your player session token and game round identifiers may be passed to third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver their game content on the circkx platform. These providers do not receive your name, contact details, or payment information.
- Fraud prevention and security partners: We may share technical data (such as IP address and device fingerprint) with specialist fraud prevention services to identify and block suspicious activity on the platform.
- Legal and regulatory authorities: circkx will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in connection with any investigation into fraud, money laundering, or other criminal activity.
- Business transfers: In the event that circkx undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such change via email and through a prominent notice on the platform.
In all cases where data is shared with third parties, circkx takes reasonable steps to ensure that those parties maintain appropriate technical and organisational measures to protect your personal data and that they process it only for the purposes for which it was shared.
Section 6
Data Retention
circkx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes that may arise. The following retention periods apply as standard, subject to any specific legal requirements that mandate a longer retention period:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML and fraud investigation obligations. |
| KYC / identity documents | Duration of account + 5 years after closure | Regulatory compliance and legal hold requirements. |
| Transaction records | 7 years from transaction date | Financial record-keeping and AML audit trail. |
| Betting and game history | 5 years from session date | Dispute resolution and responsible gaming monitoring. |
| Support communications | 3 years from last interaction | Quality assurance and dispute evidence. |
| Technical/session logs | 12 months from log date | Security monitoring and fraud detection. |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis. |
Once the applicable retention period has expired, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes, as it can no longer be linked to any individual player.
If you request deletion of your account and personal data, circkx will action the deletion of all data that is not subject to a legal retention obligation within 30 days of receiving the verified request. Data that must be retained for regulatory purposes will be held in a restricted-access archive for the duration of the mandatory retention period and then permanently deleted.
Section 7
Your Privacy Rights
As a player on the circkx platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your circkx account. We will respond within 30 days of receiving a verified request.
You may request a copy of all personal data circkx holds about you, along with information about how it is used, where it is stored, and with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details directly through your account settings.
You may request that circkx delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require us to keep certain records.
You may ask circkx to restrict processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data or the lawfulness of our processing.
Where processing is based on your consent or on a contract, you may request that circkx provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service.
You have the right to object to processing of your personal data where circkx relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
Where circkx makes decisions about you using automated processing — such as fraud scoring or responsible gaming alerts — you have the right to request human review of any decision that significantly affects you.
Where processing is based on your consent (such as receiving marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
How to Exercise Your Rights: Send a written request to [email protected] from your registered email address. Include your username and a brief description of the right you wish to exercise. We will verify your identity before actioning any request and will respond within 30 calendar days. Complex requests may require up to 60 days; we will notify you if an extension is necessary.
Section 8
Data Security
circkx employs a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, we continuously review and improve our controls in line with industry best practices.
Technical measures in place include:
- SSL/TLS encryption: All data transmitted between your browser or app and the circkx servers is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is regularly renewed and validated.
- Password hashing: Account passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm with per-user salting, making it computationally infeasible to reverse-engineer passwords from stored hashes.
- Two-factor authentication (2FA): Players are encouraged to enable 2FA on their circkx account for an additional layer of login security. 2FA is available via SMS or authenticator app.
- Access controls: Internal access to player data is restricted on a strict need-to-know basis. circkx staff members are granted only the minimum level of data access required to perform their specific role. All internal access is logged and periodically audited.
- Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts and investigation protocols.
- Regular security audits: circkx commissions periodic third-party security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
What you can do to protect your account: Use a strong, unique password for your circkx account. Do not share your login credentials with anyone. Log out of your account when using a shared or public device. Contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, circkx will notify affected players without undue delay and will take immediate steps to contain the breach, assess its impact, and prevent recurrence.
Security Highlights
- TLS 1.2+ encryption on all connections.
- Passwords stored as salted cryptographic hashes.
- Two-factor authentication (2FA) available.
- Role-based internal access controls.
- 24/7 automated intrusion detection.
- Regular third-party penetration testing.
- Breach notification process in place.
Section 9
Third-Party Services
The circkx platform integrates with a number of third-party service providers to deliver its full range of features. While circkx takes care to select reputable partners and to govern data sharing through contractual agreements, each third party operates under its own privacy policy in relation to data processed on its own systems. The following categories of third-party services are relevant to your data:
- Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game providers deliver their game software via APIs integrated into the circkx platform. These providers receive a session token and player identifier sufficient to run the game but do not receive your full personal profile.
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank process financial transactions on your behalf. These providers independently comply with financial services data regulations and operate under their own published privacy notices.
- Customer communication tools: circkx uses third-party live chat and email delivery infrastructure to provide 24/7 support. Communications data (chat transcripts and email content) processed through these tools is subject to the data processing agreements circkx holds with those vendors.
- Platform analytics: Aggregated, anonymised analytics data may be processed by third-party analytics vendors to help us understand how the platform is used and where improvements are needed. These vendors do not receive personally identifiable information.
- CDN and hosting providers: circkx uses content delivery networks and cloud hosting infrastructure to deliver the platform reliably to players across Bangladesh — from Dhaka and Chittagong to Sylhet, Rajshahi, Barisal, Rangpur, Khulna, Mymensingh, and Cox's Bazar. These infrastructure providers act as data processors under instruction from circkx.
circkx is not responsible for the privacy practices of third-party websites that may be referenced in our content or reachable through links on the platform. We recommend reviewing the privacy policy of any third-party service you interact with independently.
Section 10
Policy Updates & Contact
circkx reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this policy, we will:
- Update the "Last Updated" date displayed at the top of this page.
- Post a prominent notice on the circkx platform informing players that the Privacy Policy has been revised.
- Where the changes are significant, send an email notification to all registered players at their registered email address at least 7 days before the changes take effect.
Your continued use of the circkx platform after any revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should discontinue use of the platform and contact us to close your account.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data. The current version of this policy is always available at circkx.com/privacy-policy.
Contact our Data Privacy team: If you have any questions, concerns, or complaints about this Privacy Policy or about how circkx handles your personal data, please contact our support team. We take all privacy enquiries seriously and will acknowledge your request within 24 hours.
Email: [email protected]
Response time: under 2 hours during standard hours / within 24 hours at all other times.
Operating hours: 24/7, 365 days a year (BST, UTC+6).
Quick Reference
- Policy effective: 1 January 2026.
- Material changes notified 7 days in advance.
- Privacy requests answered within 30 days.
- Data deletion requests actioned within 30 days.
- Breach notification issued without undue delay.
- Contact: [email protected] (plain text, not a link).
For urgent privacy concerns — such as suspected unauthorised access to your account — contact our support team immediately via live chat on the circkx platform for the fastest response.
Explore circkx
Your Data is Safe — Now Let's Play
You have reviewed the circkx Privacy Policy. Our platform is built on a foundation of security and transparency. Explore cricket betting, live casino games, slots, and more with confidence.
18+ only. Please gamble responsibly. For help, visit our Responsible Gaming page.