cxsuper app does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely to operate and improve the platform.
All data transmitted between your device and our servers is protected by industry-standard 256-bit SSL encryption, keeping your credentials and financial details secure.
Every registered player has the right to access, correct, export, or request deletion of their personal data by contacting our support team at any time.
We use cookies strictly for platform functionality, security, and analytics. We do not deploy third-party advertising cookies without your knowledge.
Any third-party service provider that processes player data on our behalf — such as payment processors and game studios — is subject to strict data protection obligations.
We keep your data only for as long as necessary to fulfil the purpose it was collected for, or as required by applicable law. We do not hold data indefinitely.
1. Data We Collect
cxsuper app collects personal data that is necessary to provide a safe, compliant, and high-quality gaming experience. We collect only what we genuinely need and we are transparent about every category of data we hold.
1.1 — Registration DataWhen you create a cxsuper app account, we collect the following information:
- Full legal name as it appears on your official identity document.
- Date of birth (to verify the 18+ age requirement).
- Email address (used for account communications and verification).
- Mobile number (used for account security and, where selected, two-factor authentication).
- Residential address in Bangladesh (city, district, and full postal address).
- Preferred currency — Bangladeshi Taka (৳ / BDT).
To comply with anti-money laundering obligations and to verify your eligibility, we may request:
- A copy of your National Identity Card (NID), valid passport, or driving licence.
- A recent proof-of-address document (utility bill, bank statement, or government correspondence dated within 90 days).
- Proof of ownership of your registered payment method — for example, a screenshot showing the bKash, Nagad, Rocket, or Upay account registered in your name.
We record all deposit and withdrawal transactions on your account, including the payment method used, the transaction amount in Bangladeshi Taka, the date and time (Bangladesh Standard Time, UTC+6), and the transaction reference number provided by the payment processor. We do not store full mobile banking PINs or bank account passwords.
1.4 — Gameplay & Betting DataWe maintain a full record of all gaming sessions associated with your account, including games played, bet amounts, outcomes, session timestamps, and cumulative wagering totals. This data is used for account management, dispute resolution, responsible gaming monitoring, and VIP program tier calculations.
1.5 — Technical & Device DataWhen you access cxsuper app, our servers automatically record certain technical information:
- IP address and approximate geographic location (country and city level).
- Device type, operating system, and browser version.
- Pages visited, session duration, and click-path data.
- Referral source (the URL from which you arrived at cxsuper-app.com, if applicable).
If you contact our support team via email, live chat, or WhatsApp, we retain a record of that correspondence, including your message content, the support agent's responses, and the timestamp of each exchange. This allows us to maintain continuity of support and to resolve any follow-up queries efficiently.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, mobile, address, date of birth | Account creation and identity confirmation |
| KYC Documents | NID scan, proof of address, payment proof | Age verification, AML compliance, withdrawal processing |
| Financial Data | Transaction amounts, payment method, timestamps | Deposit/withdrawal processing, fraud prevention |
| Gameplay Data | Bets placed, games played, session logs | Account management, VIP tier, responsible gaming |
| Technical Data | IP address, device type, browser, click-path | Security monitoring, platform optimisation |
| Communications Data | Support chat logs, email correspondence | Customer service, dispute resolution |
2. How We Use Your Data
cxsuper app uses the personal data we collect strictly for the purposes described below. We do not use your data for purposes that are incompatible with those stated at the time of collection.
- Account administration: Creating, maintaining, and securing your cxsuper app account, including password resets and profile updates.
- Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks, and processing withdrawal requests to your registered payment method.
- Identity and age verification: Confirming that all registered players are aged 18 or above and that the identity provided matches KYC documentation.
- Fraud detection and prevention: Monitoring account activity for patterns consistent with fraud, money laundering, bonus abuse, or other prohibited conduct as defined in our Terms & Conditions.
- Responsible gaming: Tracking wagering patterns to identify players who may benefit from deposit limits, cooling-off periods, or self-exclusion options, in line with our Responsible Gaming Policy.
- VIP program management: Calculating your tier status (Bronze, Silver, Gold, Platinum, Diamond, Crown) based on rolling 30-day wagering totals and awarding appropriate loyalty benefits.
- Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, interface design, page load performance, and customer support quality.
- Legal compliance: Meeting our obligations under applicable law, including anti-money laundering regulations, data protection requirements, and any lawful requests from regulatory or law enforcement authorities.
- Customer support: Responding to your enquiries, resolving disputes, and maintaining a history of support interactions for continuity of service.
- Promotional communications: Sending you information about bonuses, promotions, and VIP offers relevant to your account — but only if you have opted in to marketing communications and have not subsequently withdrawn that consent.
3. Legal Basis for Processing
cxsuper app processes personal data on the following legal bases, depending on the nature of the processing activity:
3.1 — Contractual NecessityThe majority of data processing on cxsuper app is necessary to perform the contract between us and you — that is, to provide the gaming, betting, payment, and support services you registered for. Without this processing, we cannot operate your account or fulfil our obligations to you.
3.2 — Legal ObligationCertain processing activities — particularly KYC identity verification, transaction record-keeping, and the reporting of suspicious financial activity — are required by applicable law. We must carry out these activities regardless of individual consent.
3.3 — Legitimate InterestsWe process technical and usage data on the basis of our legitimate interests in securing the platform, preventing fraud, improving service quality, and managing the responsible gaming programme. We carry out a balancing assessment to ensure these interests do not override your privacy rights.
3.4 — ConsentWhere we rely on consent — primarily for sending marketing and promotional communications — we will obtain a clear, affirmative opt-in from you at the point of registration or subsequently. You may withdraw this consent at any time without penalty, as described in Section 2 above.
4. Data Sharing & Third Parties
cxsuper app does not sell, rent, or commercially transfer your personal data to third parties. However, in order to deliver our services, we share certain data with the following categories of third-party recipients on a strictly need-to-know basis:
4.1 — Payment ProcessorsWhen you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, the relevant transaction data is shared with that payment provider to facilitate the transfer. These providers operate under their own privacy policies and are bound by applicable financial regulations.
4.2 — Game Content ProvidersThird-party game studios whose content appears on cxsuper app — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive session identifiers and anonymised gameplay data necessary to render game content and verify game outcomes. These providers do not receive your full registration profile or financial details.
4.3 — IT Infrastructure & Security PartnersWe engage reputable third-party providers for hosting, content delivery, DDoS protection, and cybersecurity monitoring. These providers process technical data (including IP addresses and server logs) on our behalf under data processing agreements that require them to protect your information to the same standard as cxsuper app.
4.4 — Legal & Regulatory AuthoritiesWe may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other public authorities where required by applicable law or a valid legal order. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.
5. Cookies & Tracking Technologies
cxsuper app uses cookies and similar browser-based technologies to enable platform functionality, enhance security, and gather aggregated usage analytics. Below is a summary of the cookie categories we deploy:
5.1 — Strictly Necessary CookiesThese cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF). You cannot opt out of strictly necessary cookies while using the platform — disabling them would prevent the site from operating correctly.
5.2 — Analytics CookiesWe use first-party analytics cookies to understand how players navigate the platform — which pages are visited most, where users drop off in the registration flow, and how long sessions typically last. This data is aggregated and does not identify individual users. It is used solely to improve the cxsuper app experience.
5.3 — Security CookiesSecurity cookies help us detect unusual login patterns, flag access from unrecognised devices, and enforce session timeouts after periods of inactivity. These are a critical component of our account protection system.
5.4 — Functional CookiesFunctional cookies remember your preferences — such as your preferred game lobby view, notification settings, and responsible gaming limit configuration — so that you do not need to reconfigure them on every visit.
5.5 — Managing CookiesYou may manage or delete cookies through your browser settings at any time. Please be aware that disabling non-essential cookies may affect certain platform features. For detailed guidance on managing cookies in popular browsers (Chrome, Firefox, Safari, Edge), refer to your browser's help documentation.
6. Data Retention
cxsuper app retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any overriding legal retention requirements. Our standard retention schedules are as follows:
| Data Type | Retention Period | Rationale |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal compliance, audit trail, re-registration prevention |
| KYC documents | 5 years from account closure | Anti-money laundering regulatory requirements |
| Financial transaction records | 7 years from transaction date | Financial regulation, tax record obligations |
| Gameplay logs | 3 years from session date | Dispute resolution, responsible gaming review |
| Support correspondence | 3 years from last interaction | Complaint escalation, service quality review |
| Technical / server logs | 90 days rolling | Security monitoring and incident investigation |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for compliance purposes |
When your data reaches the end of its applicable retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with your identity.
7. Your Privacy Rights
As a player on cxsuper app, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.
7.1 — Right of AccessYou have the right to request a copy of all personal data we hold about you. We will provide this in a clear, structured format. We may ask you to verify your identity before fulfilling a data access request to prevent unauthorised disclosure.
7.2 — Right to RectificationIf any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain profile details (such as your email address or mobile number) directly within your account settings.
7.3 — Right to ErasureYou may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Please note that we may be unable to delete data that we are legally required to retain, such as financial transaction records and KYC documents held for anti-money laundering compliance purposes.
7.4 — Right to Restrict ProcessingYou may request that we temporarily restrict the processing of your data — for instance, while a dispute about its accuracy is resolved. During a restriction period, we will continue to store your data but will not actively process it beyond storage.
7.5 — Right to Data PortabilityYou have the right to receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit it directly to another controller where technically feasible.
7.6 — Right to ObjectYou have the right to object to processing carried out on the basis of our legitimate interests — in particular, processing for direct marketing purposes. Upon receipt of a valid objection, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
8. Data Security
cxsuper app employs a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers, ensuring that your credentials, financial information, and gameplay data cannot be intercepted in transit.
- Encrypted storage of sensitive fields including passwords (stored as salted cryptographic hashes, never in plain text) and KYC document scans (encrypted at rest).
- Access controls ensuring that only authorised cxsuper app personnel with a documented business need can access player account data, under strict role-based permission policies.
- Intrusion detection and DDoS protection systems that monitor our infrastructure in real time and respond to anomalous traffic patterns automatically.
- Regular security audits conducted by our internal security team and, periodically, independent third-party security assessors.
- Two-factor authentication (2FA) available to all players for an additional layer of account protection beyond the standard username and password.
Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, cxsuper app will notify affected players promptly and take all necessary steps to contain the incident, assess its scope, and prevent recurrence.
9. Children & Minors
cxsuper app is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Our registration process includes a date-of-birth check, and we conduct KYC verification to confirm age eligibility before real-money features are activated.
If we become aware — through our own verification processes or via a report from a third party — that an individual under the age of 18 has successfully registered an account, we will immediately suspend that account, void any transactions, return deposited funds to the originating payment method, and permanently delete all personal data associated with the minor's account.
If you are a parent or guardian and believe your child has created an account on cxsuper app, please contact us immediately at [email protected] so that we can take swift action.
10. Updates to This Policy
cxsuper app reserves the right to update this Privacy Policy at any time in response to changes in applicable law, platform functionality, or our data processing practices. When material changes are made — particularly those that affect your rights or how we use your data — we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the cxsuper app platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with an update, you should stop using the platform and request account closure via our support team.
Prior versions of this Privacy Policy are available upon request by contacting [email protected].
11. Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cxsuper app handles your personal data, please reach out to us using the contact details below. We take all privacy enquiries seriously and will respond promptly.
Email: [email protected]
Subject Line: "Privacy Rights Request" or "Privacy Enquiry"
Live Chat: Available 24/7 via any page on cxsuper-app.com
Response Language: English and Bengali
Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)
Target Response Time: Within 5 business days for privacy requests; within 30 calendar days for data subject rights fulfilment.