Official Policy

Privacy Policy Crickex — Your Personal Data Protection

At crickex, your privacy is more than a legal obligation — it's a responsibility we take seriously. Find out exactly how we collect, use and protect your personal information.

Updated: 1 January 2026
SSL
256-bit Encryption
PDPA
Data Protection Act
Your data is not sold to third parties for marketing purposes without your consent.
1

Introduction & Scope of This Privacy Policy

This Privacy Policy explains how Crickex ("we", "Platform" or "crickex.vin") collects, processes, stores and protects your personal information when you use our services — including our website, mobile app and all communication channels we operate.

Crickex operates in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection standards. We believe transparency is the foundation of trust — which is why we clearly explain every aspect of your data processing in this document.

This Privacy Policy applies to all registered members, website visitors and anyone who interacts with the crickex platform in any capacity. By using our services, you agree to the data protection practices described herein.

This policy should be read alongside Terms and Conditions us. In the event of any conflict, this Privacy Policy shall govern all matters relating to your personal data.
2

Types of Personal Data We Collect

Crickex collects your personal data in the following categories depending on your interaction with the platform:

Data Category Example Information Required
Identity Data Full name, date of birth, identification card number, facial image Mandatory (KYC)
Contact Data Email address, phone number, residential address Mandatory
Financial Data Bank account number, transaction history, payment methods Mandatory
Technical Data IP address, device type, web browser, operating system Automatic
Usage Data Game history, wagering habits, login frequency Automatic
Communication Data Support chat records, emails sent to us, feedback Where applicable

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as your health information, religion or political views unless you voluntarily provide it in the context of responsible gaming.

3

How We Collect Your Personal Data

Your personal data is collected through several key channels:

  • Account Registration: When you register a new account at crickex, you provide us directly with basic information such as your name, email and phone number.
  • Identity Verification (KYC): During the KYC process, you upload an identity document and proof of address to comply with anti-money laundering (AML) legal requirements.
  • Financial Transactions: Every time you make a deposit via DuitNow, FPX, Touch 'n Go, Boost, GrabPay or credit/debit card, our system records the relevant transaction details.
  • Platform Usage: Our system automatically records technical and behavioural usage data as you browse or play on the platform.
  • Direct Communications: When you contact customer support via live chat or email, those conversations are stored for quality control and complaint resolution purposes.
  • Cookies & Tracking Technologies: Our website uses first-party cookies to enhance user experience and analyse usage patterns.
We never purchase personal data lists from third parties or collect data from public sources without your knowledge.
4

Purpose of Personal Data Use

Crickex uses your personal data for legitimate and transparent purposes. Each use has a distinct legal basis:

  • Account Management: Creating, verifying and managing your member account, including secure login and two-factor authentication.
  • Transaction Processing: Processing your deposits and withdrawals quickly and securely using your preferred payment method.
  • Legal Compliance (KYC/AML): Verifying your identity and monitoring transactions to fulfil our legal obligations under anti-money laundering and counter-terrorism financing laws.
  • Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse and other suspicious activity.
  • Customer Support: Answering enquiries, resolving complaints and providing effective technical support.
  • Marketing & Communications: Sending promotional offers, product updates and relevant information — only where you have given your consent.
  • Analytics & Improvement: Understanding platform usage patterns to improve our services, interface and overall user experience.
  • Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and offer appropriate self-control tools.
5

Data Sharing with Third Parties

Crickex does not sell, rent or trade your personal data to any third party for their marketing purposes. However, we share necessary data with the following parties in limited circumstances:

  • Payment Service Providers: Required transaction information is shared with payment processors such as FPX, DuitNow and digital wallet providers to process your transactions.
  • Game Providers: Game session data is shared with licensed game software providers to ensure games function correctly.
  • Identity Verification Services: KYC documents are shared with approved third-party identity verification services for automated review purposes.
  • Relevant Authorities: Crickex will disclose data to regulatory authorities, law enforcement or courts when required to do so by law.
  • Auditors & Professional Partners: Legal advisors, accountants and auditors bound by strict confidentiality obligations.

All third parties that receive your data are bound by data protection agreements and are required to use your data only for permitted purposes.

Crickex will not share your data with third-party advertising companies, data brokers or affiliate marketing networks for profiling purposes without your explicit consent.
6

Data Security & Protection Measures

Crickex implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or disclosure:

  • 256-bit SSL Encryption: All data transmitted between your browser and our servers is protected with industry-grade TLS/SSL encryption.
  • Data-at-Rest Encryption: Sensitive data stored in our database — including passwords and bank account numbers — is encrypted using secure hashing algorithms.
  • Internal Access Controls: Only authorised staff with a legitimate business need may access member personal data, and all access is recorded in audit logs.
  • Real-Time Threat Monitoring: An intrusion detection system (IDS) operates 24/7 to automatically identify and block suspicious activity.
  • Two-Factor Authentication: All internal admin accounts require two-factor authentication. Members are also encouraged to enable this feature for added security.
  • Regular Penetration Testing: We conduct regular security testing by independent cybersecurity firms to identify and remediate vulnerabilities before they can be exploited.
  • Disaster Recovery: Data backups are performed regularly and stored in secure locations to ensure continuity of service.

In the event of a data breach that may impact your rights and freedoms, crickex is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

7

Data Retention Period

Crickex does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable law:

  • Active Account Data: Retained for the entire duration your account remains active and in use.
  • KYC & Verification Data: Stored for 7 years after account closure in accordance with Malaysia's AML legal requirements.
  • Financial Transaction Records: Stored for 7 years for audit and tax compliance purposes.
  • Support Communication Logs: Stored for 3 years after case resolution for quality control purposes.
  • Technical Log Data: Stored for 90 days for security and technical troubleshooting purposes.
  • Marketing Data (with consent): Retained until you withdraw your consent or for 3 years of inactivity.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our established procedures.

8

Cookies, Tracking Technologies & Analytics

The crickex website uses cookies and similar tracking technologies to deliver a better user experience, analyse platform performance and maintain your session security.

Types of cookies we use:

  • Essential Cookies: Required for basic website functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how visitors use our website (pages visited, time spent, errors encountered) to help us improve the platform.
  • Functional Cookies: Storing your preferences such as display settings, preferred language and saved login details for a more convenient return experience.
  • Analytics Cookies: Used to understand overall platform usage patterns in aggregate and anonymised form.

You can manage your cookie preferences through your web browser at any time. However, disabling essential cookies may affect certain features of the crickex platform.

9

Your Rights Regarding Personal Data

As an individual whose data is processed by crickex, you have the following rights under Malaysia's PDPA and our policy:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request corrections to inaccurate or incomplete data via your account settings or our support team.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing any reason.

Right to Restriction of Processing

You may request that we restrict how we process your data in certain circumstances as defined by law.

Right to Data Portability

You have the right to receive the data you have provided to us in a structured, machine-readable format.

To exercise any of the above rights, contact our privacy team at [email protected]. We will process your request within 30 business days.
10

International Data Transfers

In the course of our global operations, your personal data may be transferred to and processed in countries other than Malaysia. Such transfers are only carried out where adequate safeguards are in place:

  • Transfers to countries recognised as having adequate data protection standards.
  • Implementation of approved Standard Contractual Clauses to protect your data.
  • Use of binding data processing agreements with all international service providers.

Crickex ensures that a level of protection equivalent to Malaysia's PDPA is maintained regardless of where your data is processed.

11

Child Protection

The crickex platform is intended for individuals aged 18 and above only. We do not knowingly collect personal data from children under the age of 18.

All prospective members are required to verify their age during registration and KYC. Should we find that a child's personal data has been collected without consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your child has registered an account on our platform, please contact us immediately at [email protected] for prompt action.

12

Contact Us & Privacy Complaints

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer:

  • Email: [email protected] (text display only)
  • Response Time: We aim to respond within 48 hours on business days.
  • Language: We accept enquiries in both Bahasa Melayu and English.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority in your country.

Crickex also provides a 24/7 live chat channel on our platform for more immediate privacy enquiries. We are committed to handling every complaint fairly, transparently and within a reasonable timeframe.

This Privacy Policy may be updated from time to time. Any material changes will be communicated to members via email or an on-platform notice. Last revised: 1 January 2026.

Why Your Privacy Is Safe with Crickex

We invest in the latest security infrastructure and industry best practices to ensure your personal data is always protected.

Military-Grade Encryption

All data transmitted and stored is protected with 256-bit SSL encryption — the same standard used by financial institutions and government agencies worldwide.

Strict Identity Verification (KYC)

Our thorough KYC process ensures only the rightful account owner can access and manage their account, protecting you from identity fraud.

No Data Selling to Advertisers

Your personal data is never sold or rented to advertisers, data brokers or third-party marketing companies for commercial profiling purposes.

Malaysia PDPA Compliance

Our operations fully comply with the Personal Data Protection Act 2010 of Malaysia, giving you robust legal protection over your personal data.

Data Controls in Your Hands

You have the full right to access, amend, download or request deletion of your personal data at any time via your account settings or our support team.

Rapid Breach Notification

In the event of a security incident affecting your data, we are committed to notifying you within 72 hours — well ahead of the industry standard.

Your Data, Our Protection

Play with Peace of Mind — Your Privacy is Guaranteed

Join over 500,000 members who trust crickex as their online entertainment platform of choice. Your security and privacy are our top priority.

256-bit SSL
PDPA Compliant
No Data Selling
24/7 Support
Bahasa Melayu