Crixo Privacy Policy — Your Data, Your Control

1.1 Information provided at registration

When you create an account on Crixo, you voluntarily provide certain information that is essential to operating your account. We only collect what is necessary — nothing more.

• Full Name (as per National ID Card)
• Mobile number (for bKash/Nagad/Rocket verification)
• Date of birth (for age verification — to confirm you are 18+)
• Email address (optional, but useful for notifications)
• Password (stored in hashed form — never visible to anyone)

1.2 Payment & Transaction Information

Certain financial details are recorded during deposits and withdrawals to process payments. Your full bank account number or mobile banking PIN is never stored — only the transaction reference and amount are kept on record.

1.3 Automatically collected information

Some technical data is recorded automatically while you use the platform. This data does not directly identify you, but is used to improve platform security and performance.

• IP address (for location verification and fraud detection)
• Device Type & Operating System
• Browser Type & Version
• Time spent on each page of the platform (analytics)
• Login time & logout time

2.1 Core Purposes

Crixo uses your information only for specific, defined purposes. Your data is never used beyond those stated purposes.

• Account Management: Login, security verification, and account personalization.
• Payment processing: To ensure deposits and withdrawals are processed correctly.
• Fraud Prevention: Detecting multiple accounts, bonus abuse, and suspicious activity.
• Age verification: To prevent anyone under 18 from accessing the platform.
• Support: Understanding context during issue resolution and complaint handling.
• Legal Obligation: Maintaining records in compliance with licensing authority requirements.

2.2 Use for communication purposes

Using your mobile number and email address, Crixo may send you the following communications:

• Transaction confirmation SMS
• Login Verification OTP
• Security alert for login from a new device
• Voucher and offer notifications (you can turn these off at any time)
• Notice of Important Policy Changes

2.3 Analytical Use

Crixo uses analytics data — such as which features are used most, where issues occur, and how long users spend on each page — to make the app and website more user-friendly. No individual is identified through this analysis; all data is viewed in aggregate.

3.1 When Information May Be Shared

Crixo does not generally share personal data with third parties. However, limited sharing may be necessary in certain specific circumstances:

• Payment Processor: Only the information necessary to process transactions is exchanged with bKash, Nagad, and Rocket.
• Licensing authority: Data may be shared with regulatory authorities when required by legal obligation.
• Law enforcement agencies: Applicable in cases of court orders or government investigations, in compliance with relevant laws.
• Technology service provider: Cloud hosting and security service providers who operate on behalf of Crixo and are bound by confidentiality agreements.

3.2 What We Never Do

4.1 What Are Cookies and Why Are They Used?

Cookies are small text files stored in your browser. Crixo uses cookies to remember your login status, save your preferences, and keep the platform running smoothly. Without cookies, logging in would be cumbersome — you'd have to re-enter your password on every page.

4.2 Cookie Controls

You have full control over all cookies except essential ones. You can block or delete cookies through your browser settings. Keep in mind that disabling essential cookies will break the stay-logged-in feature, and you'll need to enter your password every time.

5.1 Data retention rules

Crixo does not store data beyond what is necessary. Separate retention periods are defined for different types of data.

6.1 Technical Security

Crixo uses industry-leading security technology to keep your data safe. This isn't just about compliance — we genuinely believe that protecting every member's personal information is our responsibility.

• 256-bit SSL encryption: All communication between the server and your browser is encrypted.
• Password hashing: Passwords are stored using the bcrypt algorithm — no one can view them directly, not even Crixo.
• Two-Factor Authentication (2FA): With 2FA enabled on your account, it stays protected even if your password is compromised.
• Real-time threat monitoring: Our anti-fraud system monitors suspicious logins and transactions 24/7.
• Data Segmentation: Different types of data are stored on separate secure servers.

6.2 Response to a Data Breach

If a data breach occurs, Crixo will act immediately. Affected members will be notified within 72 hours via SMS or email. Accounts will be temporarily locked to limit any damage, and once security is restored, members will be asked to change their passwords.

As a Crixo member, you have the following rights over your own data. To exercise any of them, email us at support@crixo.best.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, email support@crixo.best with the subject line "Privacy Request". Once your identity is verified, Crixo will respond within 30 days. An OTP will be sent to your registered mobile number for identity verification.

8.1 Policy for users under 18

Crixo does not provide services to anyone under the age of 18 and does not knowingly collect their information. Any registration attempt with a date of birth under 18 is rejected immediately.

If a parent or guardian discovers that their minor child has created a Crixo account, please contact support@crixo.best immediately. Crixo will investigate, close the account, and delete any collected data.

9.1 Notice of Changes

Crixo may update this Privacy Policy from time to time. For minor changes, only the "Last Updated" date on the page will be revised. For significant changes, all registered members will be notified via SMS and email at least 14 days before the changes take effect.

Continued use of Crixo after any changes takes effect will be considered your acceptance of the updated policy. If you do not agree to the new policy, you may request that your account be closed.

10.1 Privacy-Related Contact

For any questions, complaints, or requests regarding this Privacy Policy, please reach out through the channels below. Crixo's privacy team typically responds within 48 business hours.