cricmsd Privacy Policy
— Your Data, Your Rights
At cricmsd, protecting the personal information of every player in Bangladesh is a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how it is stored and secured, and what rights you hold over your own information.
Information We Collect
When you create a cricmsd account or interact with our platform, we collect personal data that is necessary to provide you with a secure, compliant, and personalised sports betting and casino experience. We collect only the information we genuinely need — we do not collect data speculatively or beyond what is required to operate the platform safely and responsibly for players across Bangladesh.
1.1 Registration Data
At the point of account creation, cricmsd collects: your full legal name as it appears on your Bangladesh National Identity Card (NID); your date of birth (used to verify you are aged 18 or above); a valid email address; a mobile phone number that is registered to a bKash, Nagad, or Rocket mobile banking account in your own name; and a password of your choosing (stored in hashed, non-reversible form — we never store your raw password).
1.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to protect players from fraud and identity theft, we collect government-issued identity documents at the withdrawal verification stage. Accepted documents include: your Bangladesh NID (front and back), a valid passport, or a Bangladesh driving licence. We may also request a photograph of the mobile banking account confirmation screen (bKash, Nagad, or Rocket) to verify that payment methods match the account holder's identity.
1.3 Financial Transaction Data
Each deposit and withdrawal transaction on cricmsd generates a transaction record that includes: the transaction amount in BDT (৳), the payment method used, the timestamp of the transaction in Bangladesh Standard Time (BST, UTC+6), and a unique transaction reference number. We do not store full mobile banking PINs or passwords. We store only the wallet number and the name registered to that wallet, solely for the purpose of matching payment instructions to your verified account.
1.4 Behavioural and Usage Data
As you use the cricmsd platform, we automatically collect certain technical and behavioural data including: IP address and approximate geolocation (country and city level); device type, operating system, and browser version; pages visited on the cricmsd website and the duration of each visit; betting history (markets wagered on, bet amounts, game sessions, and outcomes); and session timestamps. This data is used to improve platform performance, detect fraudulent activity, and personalise your experience where you have consented to personalisation.
1.5 Customer Support Communications
When you contact the cricmsd support team via live chat or email, we retain a record of that communication, including the content of messages, the timestamp, and the resolution outcome. These records are kept to ensure continuity of support, to train our support team, and to maintain an audit trail in the event of a formal dispute.
1.6 Voluntary Survey and Feedback Data
From time to time, cricmsd may invite you to participate in optional player satisfaction surveys or feedback forms. Participation is entirely voluntary. Any responses you provide are stored anonymously where possible and used solely for the purpose of improving the platform and its services for the Bangladesh market.
cricmsd collects only the minimum personal data required to operate a safe, compliant platform. We do not collect data speculatively or share it with advertisers.
| Data Type | Required? |
|---|---|
| Full legal name | Mandatory |
| Date of birth | Mandatory |
| Email address | Mandatory |
| Mobile number | Mandatory |
| NID / Passport | At withdrawal |
| Wallet number | At payment |
| IP address | Automatic |
| Survey responses | Voluntary |
Your password is stored using a one-way cryptographic hash. Neither cricmsd staff nor any system process can read your raw password. If you forget it, it must be reset — not retrieved.
How We Use Your Data
Your registration data and transaction history are used to operate your cricmsd account — processing deposits and withdrawals via bKash, Nagad, and Rocket, settling bets on cricket markets and casino games, and maintaining your account balance accurately in BDT.
KYC documents are used exclusively to verify that you are who you say you are, that you are aged 18 or above, and that your payment methods belong to you. This protects both you and the integrity of the platform from fraud and underage gambling.
Usage and behavioural data — including IP addresses, device fingerprints, and betting patterns — are analysed by our risk team to detect and prevent account takeovers, bonus abuse, multi-accounting, and money laundering through the deposit system.
Support communication records allow our agents to pick up any conversation in context, resolve disputes accurately, and maintain a fair audit trail. Records are accessible only by authorised support and compliance staff.
Aggregated and anonymised usage data — such as which cricket markets attract the most bets or which slot titles are played most during IPL season — helps cricmsd improve its product offerings and navigation for the Bangladesh audience.
We use your email address and mobile number to send essential account notifications: deposit confirmations, withdrawal processing updates, password reset instructions, and KYC verification requests. Marketing communications are sent only with your explicit opt-in consent.
2.1 Legal Basis for Processing
cricmsd processes your personal data on the following legal bases: contractual necessity — processing required to fulfil the player account agreement you enter into at registration; legitimate interest — fraud detection, platform security, and responsible gaming monitoring; legal obligation — KYC and anti-money-laundering record keeping; and consent — marketing communications and optional personalisation features, which you may withdraw at any time via your account settings.
2.2 What We Do Not Do With Your Data
cricmsd does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. We do not use your data to build advertising profiles that are shared with external platforms. We do not use automated profiling to make decisions that produce significant legal effects on your account without human review. We do not transfer your data outside the secure processing environment described in section 5 without appropriate safeguards in place.
Data Sharing & Third Parties
cricmsd does not share your personal data with third parties except in the specific, limited circumstances described below. Every third party that processes data on behalf of cricmsd is bound by a data processing agreement requiring them to maintain the same standard of data protection that cricmsd applies internally.
3.1 Payment Processors
To process deposits and withdrawals, cricmsd shares the minimum necessary transaction data — your wallet number, the transaction amount, and the transaction reference — with the relevant mobile banking platform (bKash, Nagad, Rocket, Upay, SureCash, or Tap). These platforms are independent financial service providers operating under their own privacy policies and applicable Bangladesh financial regulations. cricmsd does not control their data practices beyond the scope of the transaction.
3.2 Game Content Providers
Casino games on cricmsd are supplied by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive a session token and a player pseudonym (not your full name or NID) to load and run their games. They do not receive your full registration profile, your payment details, or your identity documents. Their game engines and RNG systems are certified independently of cricmsd.
3.3 Legal and Regulatory Disclosure
cricmsd may disclose personal data to law enforcement agencies, government bodies, or court authorities where required to do so by a valid legal obligation, court order, or regulatory instruction. Any such disclosure is limited to the specific data requested and does not extend beyond what is legally required. Where permitted by law, cricmsd will notify the affected player of such a disclosure.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of cricmsd's assets, player data held at the time of the transaction may be transferred to the acquiring entity as part of the business assets. In such an event, affected players will be notified via the registered email address before the transfer is completed, and the acquiring entity will be required to honour this Privacy Policy or issue a revised policy with advance notice.
| Third Party | Data Shared | Purpose |
|---|---|---|
| bKash / Nagad / Rocket | Wallet number, amount | Payment processing |
| Pragmatic Play, Evolution et al. | Session token, pseudonym | Game delivery |
| KYC Verification Service | NID image, selfie | Identity verification |
| Cloud Hosting Provider | Encrypted account data | Secure data storage |
| Law Enforcement | As legally required | Legal obligation |
cricmsd never sells, rents, or trades your personal data to advertisers, data brokers, or any commercial third party. This is an unconditional commitment.
Data Security & Storage
cricmsd takes the security of your personal data seriously. We apply a layered security architecture that combines encryption in transit, encryption at rest, access controls, and regular security audits to minimise the risk of unauthorised access, data loss, or data breach. No system is unconditionally immune to every possible attack, but our goal is to make the cost of a breach so high as to render it practically infeasible.
All data transmitted between your device and the cricmsd platform is protected by 256-bit SSL/TLS encryption. This means that even if network traffic were intercepted, the data would be unreadable without the private decryption key held exclusively by cricmsd's servers. The padlock icon in your browser's address bar confirms that this encryption is active throughout your session.
All data in transit between your browser and cricmsd is encrypted using industry-standard 256-bit SSL. Certificates are renewed continuously and monitored for expiry.
Personal data at rest — including KYC documents and transaction records — is stored in AES-256 encrypted databases hosted on secure infrastructure with restricted physical and logical access.
Access to player data is restricted to authorised cricmsd staff on a strict need-to-know basis. All data access is logged and audited. No employee may access player KYC data without a recorded justification.
cricmsd conducts regular internal security reviews and periodic third-party penetration tests to identify and remediate vulnerabilities before they can be exploited.
5.1 Data Breach Response
In the event that cricmsd detects or is made aware of a data breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify all affected account holders via their registered email address within 72 hours of confirming the breach. The notification will describe what data was affected, what steps cricmsd has taken in response, and what actions you should take to protect your account (such as changing your password). Affected accounts will be temporarily suspended and password-reset-forced as an immediate containment measure.
5.2 Your Responsibility
While cricmsd takes every reasonable measure to protect your data at the platform level, you are responsible for maintaining the security of your own login credentials. Use a strong, unique password for your cricmsd account. Do not share your password with anyone — including persons claiming to be cricmsd support staff. Enable any two-factor authentication options available in your account settings. If you suspect your account has been accessed without your authorisation, contact support immediately via live chat or at [email protected].
Your Privacy Rights
As a cricmsd player, you hold specific rights over the personal data we hold about you. These rights are described below. To exercise any of these rights, contact the cricmsd data team at [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". We will acknowledge your request within 48 hours and respond in full within 30 calendar days.
Right of Access
You may request a complete copy of all personal data cricmsd holds about you, including your registration data, transaction history, KYC documents on file, and support communication records.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Name corrections require updated NID documentation to maintain KYC integrity.
Right to Erasure
You may request deletion of your personal data. Note that data retained for legal compliance (transaction records, KYC documents) cannot be erased until the end of the applicable retention period — see section 7.
Right to Restriction
You may request that cricmsd temporarily restricts processing of your data — for example while a rectification request is being assessed — without requiring full deletion of the data.
Right to Portability
You may request a machine-readable export of the personal data you have actively provided to cricmsd (registration data and voluntary survey responses) in CSV or JSON format.
Right to Object
You may object to cricmsd processing your data for marketing communications at any time. Opt-out requests for marketing are processed within 24 hours. Objections to processing based on legitimate interest are assessed case by case.
Data Retention Policy
cricmsd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as long as is required by applicable legal or regulatory obligations. The table to the right summarises the standard retention periods applicable to each data category. When a retention period expires, data is securely deleted or anonymised such that it can no longer be associated with an individual player.
7.1 Active Account Data
While your cricmsd account is active, all registration data, transaction records, and KYC documents are retained in full. This data is necessary to operate your account, process payments, and maintain the integrity of your betting and gaming history. Retention continues for the full duration of the active account relationship.
7.2 Post-Closure Retention
Following account closure — whether requested by you or initiated by cricmsd — we retain transaction records and KYC documentation for a period of five years from the closure date. This retention period exists to satisfy anti-money-laundering record-keeping requirements and to allow resolution of any disputes or legal claims arising from the account period. After five years, financial transaction records and KYC documents are permanently deleted from all active systems.
7.3 Marketing Data
If you opted in to marketing communications from cricmsd, your email address and communication preferences are retained for as long as your account is active and for up to 12 months following account closure or marketing opt-out, whichever comes first. After this period, marketing data is purged completely. Opt-out requests are honoured within 24 hours — you will not receive marketing communications after opting out, even within the 12-month retention window.
7.4 Support Communications
Live chat transcripts and email correspondence with the cricmsd support team are retained for three years from the date of the communication. This period covers the statutes of limitation applicable to contractual and consumer protection disputes. After three years, support records are anonymised and added to aggregate training datasets with no player-identifiable information remaining.
| Data Category | Retention Period |
|---|---|
| Registration data (active) | Duration of account |
| KYC documents | 5 years post-closure |
| Transaction records | 5 years post-closure |
| Betting history | 5 years post-closure |
| Support communications | 3 years from date |
| Marketing preferences | 12 months post opt-out |
| Analytics (anonymised) | Indefinite (no PII) |
| Session / IP logs | 90 days rolling |
Anti-money-laundering regulations require financial services platforms to retain transaction and identity records for a minimum period after account closure. This obligation overrides a player's right to erasure for the specific data categories covered. All other data is deleted as promptly as possible.
Policy Updates & Contact
8.1 Changes to This Privacy Policy
cricmsd reviews this Privacy Policy periodically and updates it whenever our data practices change or when legal obligations require revision. The effective date at the top of the policy indicates the date of the most recent update. When material changes are made — particularly changes that expand the categories of data collected or the purposes for which data is used — we will notify all registered players via the email address on file at least 14 days before the revised policy takes effect.
Your continued use of the cricmsd platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should close your account before the effective date by contacting the support team via live chat or at [email protected].
8.2 Minor Updates
Corrections of typographical errors, clarifications that do not alter the substance of existing provisions, or updates that expand player rights rather than restrict them may be made without individual notification. In these cases, the updated effective date will be changed at the top of the policy and a summary of the change will appear in the changelog maintained at the bottom of this page.
8.3 Contacting the cricmsd Data Team
For all privacy-related enquiries — including rights requests, complaints about data handling, questions about specific data processing activities, or requests for a copy of any data processing agreements referenced in this policy — contact the cricmsd data protection team at [email protected]. Please include "Privacy Enquiry" in the subject line along with your registered account username. Our team will respond within 48 hours on all business days and within 96 hours during peak periods such as BPL Finals weeks or ICC tournament dates.
cricmsd is committed to resolving privacy concerns directly with players in the first instance. If you are unsatisfied with our response to a privacy complaint, you have the right to escalate the matter through the appropriate channels available to you under applicable law.
This Privacy Policy was last reviewed and updated in January 2026. cricmsd recommends all players re-read this policy whenever they receive a notification of an update .
Email: [email protected]
Subject: "Privacy Enquiry — [Username]"
Response time: within 48 hours on business days.
Material changes to this Privacy Policy are communicated to all registered players via email at least 14 days before they take effect. Check your registered inbox to stay informed.
Ready to Play at cricmsd?
Now that you understand how your data is protected, explore everything cricmsd has to offer — from live cricket betting to premium casino games, all built for Bangladesh players.